last executing test programs:

104.961048ms ago: executing program 3 (id=4):
ptrace(0x0, 0x0)

94.505758ms ago: executing program 2 (id=6):
sendto(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)

58.488309ms ago: executing program 3 (id=7):
socket$inet_icmp_raw(0x2, 0x3, 0x1)

58.335829ms ago: executing program 0 (id=8):
mmap(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

58.187949ms ago: executing program 4 (id=10):
getsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000))

58.130399ms ago: executing program 0 (id=11):
mbind(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)

58.043749ms ago: executing program 2 (id=12):
pivot_root(&(0x7f0000000000), &(0x7f0000000000))

57.830489ms ago: executing program 1 (id=13):
fsetxattr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0)

57.708419ms ago: executing program 0 (id=14):
sendmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0)

57.656519ms ago: executing program 1 (id=15):
close(0xffffffffffffffff)

57.493889ms ago: executing program 2 (id=16):
dup(0xffffffffffffffff)

57.381719ms ago: executing program 4 (id=17):
getpeername(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000))

31.943339ms ago: executing program 0 (id=18):
accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))

31.837819ms ago: executing program 1 (id=19):
flistxattr(0xffffffffffffffff, &(0x7f0000000000), 0x0)

31.739639ms ago: executing program 2 (id=20):
sched_setparam(0x0, &(0x7f0000000000))

31.693879ms ago: executing program 3 (id=21):
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)

31.60279ms ago: executing program 4 (id=22):
getrlimit(0x0, &(0x7f0000000000))

31.55473ms ago: executing program 0 (id=23):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ambient', 0x2, 0x0)

31.521159ms ago: executing program 2 (id=24):
recvfrom(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)

31.471739ms ago: executing program 4 (id=25):
umount2(&(0x7f0000000000), 0x0)

601.78µs ago: executing program 1 (id=26):
recvmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0)

470.03µs ago: executing program 3 (id=27):
lsm_get_self_attr(0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0)

417.28µs ago: executing program 2 (id=28):
memfd_create(&(0x7f0000000000), 0x0)

305.07µs ago: executing program 4 (id=29):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))

230.16µs ago: executing program 0 (id=30):
io_submit(0x0, 0x0, &(0x7f0000000000))

193.4µs ago: executing program 1 (id=31):
socket$pppoe(0x18, 0x1, 0x0)

162.39µs ago: executing program 3 (id=32):
getresuid(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))

31.61µs ago: executing program 1 (id=33):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run', 0x1, 0x0)

0s ago: executing program 4 (id=34):
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.24' (ED25519) to the list of known hosts.
[   33.373546][ T4033] cgroup: Unknown subsys name 'net'
[   33.647995][ T4033] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   33.927419][ T4033] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   34.747768][ T4079] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
[   34.749027][ T4079] Modules linked in:
[   34.749618][ T4079] CPU: 1 PID: 4079 Comm: syz.0.30 Not tainted syzkaller #0
[   34.750619][ T4079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   34.752292][ T4079] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
[   34.753484][ T4079] pc : lookup_ioctx+0x108/0x7d0
[   34.754243][ T4079] lr : lookup_ioctx+0xe4/0x7d0
[   34.754931][ T4079] sp : ffff80001f2f7c20
[   34.755593][ T4079] x29: ffff80001f2f7c20 x28: ffff0000c7b50000 x27: 0000000020000000
[   34.756924][ T4079] x26: 1fffe00018f6a000 x25: 1ffff00003e5efd6 x24: ffff0000c5c6dc00
[   34.758285][ T4079] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000
[   34.759548][ T4079] x20: ffff0000c7b50000 x19: 0000000000000000 x18: 0000000000000000
[   34.760783][ T4079] x17: 0000000000000000 x16: ffff800008a1a0d8 x15: 0000000000000000
[   34.762045][ T4079] x14: 0000000000000000 x13: 1ffff0000283006b x12: 0000000000ff0100
[   34.763374][ T4079] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff
[   34.764693][ T4079] x8 : 0000000000000000 x7 : ffff800008751314 x6 : 0000000000000000
[   34.766013][ T4079] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
[   34.767383][ T4079] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000
[   34.768642][ T4079] Call trace:
[   34.769151][ T4079]  lookup_ioctx+0x108/0x7d0
[   34.769895][ T4079]  __arm64_sys_io_submit+0x110/0x40c
[   34.770731][ T4079]  invoke_syscall+0x98/0x2b8
[   34.771460][ T4079]  el0_svc_common+0x138/0x258
[   34.772284][ T4079]  do_el0_svc+0x58/0x14c
[   34.772963][ T4079]  el0_svc+0x78/0x1e0
[   34.773635][ T4079]  el0t_64_sync_handler+0xcc/0xe4
[   34.774481][ T4079]  el0t_64_sync+0x1a0/0x1a4
[   34.775198][ T4079] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) 
[   34.776168][ T4079] ---[ end trace e159463e34735c7c ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   34.968906][ T4079] Kernel panic - not syncing: Oops - BTI: Fatal exception
[   34.969899][ T4079] SMP: stopping secondary CPUs
[   34.970654][ T4079] Kernel Offset: disabled
[   34.971267][ T4079] CPU features: 0x8,000003c1,7d33ffd9
[   34.972117][ T4079] Memory Limit: none
[   35.163499][ T4079] Rebooting in 86400 seconds..