last executing test programs:

114.272254ms ago: executing program 1 (id=2):
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000))

97.223034ms ago: executing program 2 (id=3):
sendmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0)

94.597824ms ago: executing program 3 (id=4):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci', 0x800, 0x0)

61.162966ms ago: executing program 0 (id=6):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram', 0x800, 0x0)

61.047137ms ago: executing program 2 (id=7):
mprotect(0x0, 0x0, 0x0)

60.761017ms ago: executing program 3 (id=8):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs', 0x800, 0x0)

60.515016ms ago: executing program 0 (id=9):
setxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0)

60.456636ms ago: executing program 2 (id=10):
getsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000))

60.380516ms ago: executing program 0 (id=11):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load', 0x2, 0x0)

60.272137ms ago: executing program 3 (id=12):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot', 0x800, 0x0)

59.947106ms ago: executing program 4 (id=5):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa', 0x800, 0x0)

27.859839ms ago: executing program 1 (id=13):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x0)

27.700549ms ago: executing program 3 (id=14):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member', 0x2, 0x0)

27.617169ms ago: executing program 2 (id=15):
accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))

27.523159ms ago: executing program 4 (id=16):
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)

27.401709ms ago: executing program 0 (id=17):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng', 0x800, 0x0)

27.238389ms ago: executing program 4 (id=18):
connect(0xffffffffffffffff, &(0x7f0000000000), 0x0)

27.118169ms ago: executing program 2 (id=19):
setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0)

26.981539ms ago: executing program 3 (id=20):
sched_setattr(0x0, &(0x7f0000000000), 0x0)

1.67375ms ago: executing program 1 (id=21):
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000))

1.52198ms ago: executing program 0 (id=22):
mknodat(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)

1.46108ms ago: executing program 1 (id=23):
socket(0x10, 0x3, 0x10)

1.39747ms ago: executing program 4 (id=24):
io_submit(0x0, 0x0, &(0x7f0000000000))

1.35499ms ago: executing program 2 (id=25):
bind(0xffffffffffffffff, &(0x7f0000000000), 0x0)

1.24974ms ago: executing program 3 (id=26):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/raw-gadget', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw-gadget', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/raw-gadget', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/raw-gadget', 0x800, 0x0)

1.14316ms ago: executing program 0 (id=27):
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000), 0x0)

0s ago: executing program 1 (id=28):
newfstatat(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000000), 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts.
[   27.449775][ T4034] cgroup: Unknown subsys name 'net'
[   27.671806][ T4034] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   27.972559][ T4034] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   28.741676][ T4074] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
[   28.742938][ T4074] Modules linked in:
[   28.743569][ T4074] CPU: 0 PID: 4074 Comm: syz.4.24 Not tainted syzkaller #0
[   28.744706][ T4074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   28.746133][ T4074] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
[   28.747257][ T4074] pc : lookup_ioctx+0x108/0x7c8
[   28.747980][ T4074] lr : lookup_ioctx+0xe4/0x7c8
[   28.748680][ T4074] sp : ffff80001f287c20
[   28.749276][ T4074] x29: ffff80001f287c20 x28: ffff0000c7f88000 x27: 0000000020000000
[   28.750486][ T4074] x26: 1fffe00018ff1000 x25: 1ffff00003e50fd6 x24: ffff0000c8aa2280
[   28.751714][ T4074] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000
[   28.752866][ T4074] x20: ffff0000c7f88000 x19: 0000000000000000 x18: 0000000000000000
[   28.754031][ T4074] x17: 0000000000000000 x16: ffff800008a220d8 x15: 0000000000000000
[   28.755223][ T4074] x14: 0000000000000005 x13: 1ffff0000285202b x12: 0000000000ff0100
[   28.756447][ T4074] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff
[   28.757646][ T4074] x8 : 0000000000000000 x7 : ffff800008758124 x6 : 0000000000000000
[   28.758813][ T4074] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
[   28.760003][ T4074] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000
[   28.761179][ T4074] Call trace:
[   28.761665][ T4074]  lookup_ioctx+0x108/0x7c8
[   28.762286][ T4074]  __arm64_sys_io_submit+0x110/0x410
[   28.763092][ T4074]  invoke_syscall+0x98/0x2b0
[   28.763790][ T4074]  el0_svc_common+0x138/0x258
[   28.764501][ T4074]  do_el0_svc+0x58/0x13c
[   28.765099][ T4074]  el0_svc+0x78/0x1d0
[   28.765713][ T4074]  el0t_64_sync_handler+0xcc/0xe4
[   28.766481][ T4074]  el0t_64_sync+0x1a0/0x1a4
[   28.767160][ T4074] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) 
[   28.768152][ T4074] ---[ end trace df3147b0c076659a ]---
[   28.933424][ T4074] Kernel panic - not syncing: Oops - BTI: Fatal exception
[   28.934461][ T4074] SMP: stopping secondary CPUs
[   28.935216][ T4074] Kernel Offset: disabled
[   28.935858][ T4074] CPU features: 0x8,000003c1,7d33ffd9
[   28.936639][ T4074] Memory Limit: none
[   29.097664][ T4074] Rebooting in 86400 seconds..