last executing test programs:

193.567614ms ago: executing program 2 (id=7):
socket$inet6_icmp(0xa, 0x2, 0x3a)

154.125678ms ago: executing program 2 (id=9):
connect(0xffffffffffffffff, &(0x7f0000000000), 0x0)

152.976498ms ago: executing program 2 (id=11):
syz_open_dev$dmmidi(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$dmmidi(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$dmmidi(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$dmmidi(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$dmmidi(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$dmmidi(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$dmmidi(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$dmmidi(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$dmmidi(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$dmmidi(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$dmmidi(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$dmmidi(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$dmmidi(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$dmmidi(&(0x7f0000000500), 0x4, 0x800)

152.393468ms ago: executing program 4 (id=14):
socket$inet_udp(0x2, 0x2, 0x0)

127.71062ms ago: executing program 4 (id=17):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter', 0x800, 0x0)

126.7689ms ago: executing program 4 (id=20):
getpriority(0x0, 0x0)

125.98393ms ago: executing program 4 (id=22):
listxattr(&(0x7f0000000000), &(0x7f0000000000), 0x0)

100.433632ms ago: executing program 4 (id=27):
getxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0)

99.817342ms ago: executing program 0 (id=29):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty', 0x800, 0x0)

74.710054ms ago: executing program 2 (id=31):
eventfd2(0x0, 0x0)

74.395634ms ago: executing program 4 (id=32):
rt_sigreturn()

73.788674ms ago: executing program 1 (id=33):
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000), &(0x7f0000000000))

73.440794ms ago: executing program 0 (id=34):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng', 0x800, 0x0)

73.016384ms ago: executing program 3 (id=35):
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000), 0x0)

72.872514ms ago: executing program 1 (id=36):
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x800)

72.202125ms ago: executing program 2 (id=37):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso', 0x2, 0x0)

43.200746ms ago: executing program 3 (id=38):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm', 0x2, 0x0)

42.974067ms ago: executing program 0 (id=39):
getcwd(&(0x7f0000000000), 0x0)

42.866677ms ago: executing program 1 (id=40):
fstat(0xffffffffffffffff, &(0x7f0000000000))

42.753177ms ago: executing program 2 (id=41):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1', 0x800, 0x0)

42.655137ms ago: executing program 3 (id=42):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load', 0x2, 0x0)

42.497807ms ago: executing program 0 (id=43):
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$MSR(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$MSR(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$MSR(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$MSR(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$MSR(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$MSR(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$MSR(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$MSR(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$MSR(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$MSR(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$MSR(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$MSR(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$MSR(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$MSR(&(0x7f0000000500), 0x4, 0x800)

42.402817ms ago: executing program 1 (id=44):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs', 0x800, 0x0)

1.20353ms ago: executing program 3 (id=45):
statfs(&(0x7f0000000000), &(0x7f0000000000))

946.64µs ago: executing program 1 (id=46):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

744.81µs ago: executing program 0 (id=47):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0', 0x800, 0x0)

675.01µs ago: executing program 3 (id=48):
get_mempolicy(&(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x0)

620.2µs ago: executing program 1 (id=49):
socket$netlink(0x10, 0x3, 0x0)

156.44µs ago: executing program 0 (id=50):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access', 0x2, 0x0)

0s ago: executing program 3 (id=51):
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=55):
io_getevents(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts.
[   31.572123][ T4032] cgroup: Unknown subsys name 'net'
[   31.862071][ T4032] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   32.161556][ T4032] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   33.539001][ T4102] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
[   33.540296][ T4102] Modules linked in:
[   33.540937][ T4102] CPU: 0 PID: 4102 Comm: syz.0.55 Not tainted 5.15.189-syzkaller #0
[   33.542232][ T4102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   33.543819][ T4102] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
[   33.545091][ T4102] pc : lookup_ioctx+0x108/0x7d0
[   33.545876][ T4102] lr : lookup_ioctx+0xe4/0x7d0
[   33.546685][ T4102] sp : ffff80001f717b20
[   33.547392][ T4102] x29: ffff80001f717b20 x28: ffff0000ca213680 x27: dfff800000000000
[   33.548600][ T4102] x26: ffff80001f717b80 x25: ffff700003ee2f70 x24: ffff0000c8012840
[   33.549959][ T4102] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000
[   33.551237][ T4102] x20: ffff0000ca213680 x19: 0000000000000000 x18: 0000000000000000
[   33.552609][ T4102] x17: 0000000000000000 x16: ffff800008a19714 x15: 0000000000000000
[   33.554006][ T4102] x14: 0000000000000000 x13: 1ffff0000282e06b x12: 0000000000ff0100
[   33.555292][ T4102] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff
[   33.556592][ T4102] x8 : 0000000000000000 x7 : ffff800008750ed4 x6 : 0000000000000000
[   33.557981][ T4102] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
[   33.559239][ T4102] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000
[   33.560555][ T4102] Call trace:
[   33.561109][ T4102]  lookup_ioctx+0x108/0x7d0
[   33.561787][ T4102]  do_io_getevents+0x120/0x394
[   33.562523][ T4102]  __arm64_sys_io_getevents+0x160/0x23c
[   33.563401][ T4102]  invoke_syscall+0x98/0x2b8
[   33.564115][ T4102]  el0_svc_common+0x138/0x258
[   33.564821][ T4102]  do_el0_svc+0x58/0x14c
[   33.565440][ T4102]  el0_svc+0x78/0x1e0
[   33.566072][ T4102]  el0t_64_sync_handler+0xcc/0xe4
[   33.566860][ T4102]  el0t_64_sync+0x1a0/0x1a4
[   33.567515][ T4102] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) 
[   33.568565][ T4102] ---[ end trace a750c2242b28cb9a ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   33.802617][ T4102] Kernel panic - not syncing: Oops - BTI: Fatal exception
[   33.803812][ T4102] SMP: stopping secondary CPUs
[   33.804551][ T4102] Kernel Offset: disabled
[   33.805206][ T4102] CPU features: 0x8,000003c1,7d33ffd9
[   33.805993][ T4102] Memory Limit: none
[   33.981636][ T4102] Rebooting in 86400 seconds..