last executing test programs:

118.410367ms ago: executing program 4 (id=134):
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)

85.072588ms ago: executing program 4 (id=136):
clock_getres(0x0, &(0x7f0000000000))

85.014658ms ago: executing program 0 (id=137):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats', 0x0, 0x0)

84.780378ms ago: executing program 1 (id=139):
mq_timedsend(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0)

84.687058ms ago: executing program 2 (id=140):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mali0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mali0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mali0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mali0', 0x800, 0x0)

84.549888ms ago: executing program 4 (id=141):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock', 0x800, 0x0)

61.719548ms ago: executing program 0 (id=142):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/target_ids', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/target_ids', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/target_ids', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/target_ids', 0x800, 0x0)

61.464208ms ago: executing program 4 (id=143):
socket(0x1, 0x1, 0x0)

61.358198ms ago: executing program 2 (id=144):
socket$inet6_sctp(0xa, 0x1, 0x84)

61.302228ms ago: executing program 1 (id=145):
truncate(&(0x7f0000000000), 0x0)

61.239188ms ago: executing program 3 (id=146):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0', 0x800, 0x0)

61.196208ms ago: executing program 0 (id=147):
geteuid()

61.109658ms ago: executing program 1 (id=148):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/logging', 0x2, 0x0)

61.009948ms ago: executing program 3 (id=149):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bifrost', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bifrost', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bifrost', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bifrost', 0x800, 0x0)

33.898929ms ago: executing program 2 (id=150):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cdrom', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cdrom', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cdrom', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cdrom', 0x800, 0x0)

33.672899ms ago: executing program 0 (id=151):
capset(&(0x7f0000000000), &(0x7f0000000000))

33.435749ms ago: executing program 3 (id=152):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/syslog', 0x2, 0x0)

33.360109ms ago: executing program 1 (id=153):
lseek(0xffffffffffffffff, 0x0, 0x0)

33.216889ms ago: executing program 3 (id=154):
request_key(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0)

33.158709ms ago: executing program 0 (id=155):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nmem0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nmem0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nmem0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nmem0', 0x800, 0x0)

32.867729ms ago: executing program 2 (id=156):
socket$inet_icmp_raw(0x2, 0x3, 0x1)

929.32µs ago: executing program 4 (id=157):
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

749.58µs ago: executing program 3 (id=158):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member', 0x2, 0x0)

666.67µs ago: executing program 1 (id=159):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0', 0x2, 0x0)

383.73µs ago: executing program 2 (id=160):
getcwd(&(0x7f0000000000), 0x0)

285.19µs ago: executing program 0 (id=161):
gettid()

228.4µs ago: executing program 3 (id=162):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/socket/zygote', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/socket/zygote', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/socket/zygote', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/socket/zygote', 0x800, 0x0)

201.28µs ago: executing program 4 (id=163):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1', 0x800, 0x0)

56.01µs ago: executing program 1 (id=164):
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)

0s ago: executing program 2 (id=165):
socket$caif_seqpacket(0x25, 0x5, 0x0)

0s ago: executing program 1 (id=168):
io_getevents(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts.
[   29.243987][ T4036] cgroup: Unknown subsys name 'net'
[   29.471640][ T4036] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   29.736913][ T4036] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   31.150973][ T4221] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
[   31.152472][ T4221] Modules linked in:
[   31.153200][ T4221] CPU: 0 PID: 4221 Comm: syz.1.168 Not tainted syzkaller #0
[   31.154673][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   31.156459][ T4221] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
[   31.157787][ T4221] pc : lookup_ioctx+0x10c/0x7c0
[   31.158638][ T4221] lr : lookup_ioctx+0xe8/0x7c0
[   31.159407][ T4221] sp : ffff80001f9e7b20
[   31.160134][ T4221] x29: ffff80001f9e7b20 x28: ffff0000cae58000 x27: dfff800000000000
[   31.161554][ T4221] x26: ffff80001f9e7b80 x25: ffff700003f3cf70 x24: ffff0000d3d11700
[   31.162976][ T4221] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000
[   31.164408][ T4221] x20: ffff0000cae58000 x19: 0000000000000000 x18: 0000000000000000
[   31.165848][ T4221] x17: 0000000000000000 x16: ffff800008a30e84 x15: 0000000000000000
[   31.167391][ T4221] x14: 0000000000000002 x13: 1ffff0000288002b x12: 0000000097863b1e
[   31.168926][ T4221] x11: ff80800008a30e60 x10: 0000000000000000 x9 : 0000ffffffffffff
[   31.170337][ T4221] x8 : 0000000000000000 x7 : ffff800008763378 x6 : 0000000000000000
[   31.171934][ T4221] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
[   31.173469][ T4221] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000
[   31.175108][ T4221] Call trace:
[   31.175732][ T4221]  lookup_ioctx+0x10c/0x7c0
[   31.176526][ T4221]  do_io_getevents+0x12c/0x3c8
[   31.177315][ T4221]  __arm64_sys_io_getevents+0x16c/0x250
[   31.178275][ T4221]  invoke_syscall+0x98/0x28c
[   31.179030][ T4221]  el0_svc_common+0x13c/0x258
[   31.179858][ T4221]  do_el0_svc+0x5c/0x140
[   31.180652][ T4221]  el0_svc+0x78/0x1d0
[   31.181354][ T4221]  el0t_64_sync_handler+0xcc/0xe4
[   31.182234][ T4221]  el0t_64_sync+0x1a0/0x1a4
[   31.183002][ T4221] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) 
[   31.184148][ T4221] ---[ end trace 3cb8cd6f53d315f6 ]---
[   31.250106][ T4042] ODEBUG: Out of memory. ODEBUG disabled
[   31.379180][ T4221] Kernel panic - not syncing: Oops - BTI: Fatal exception
[   31.380253][ T4221] SMP: stopping secondary CPUs
[   31.381099][ T4221] Kernel Offset: disabled
[   31.381827][ T4221] CPU features: 0xa,000003c1,7d33ffd9
[   31.382749][ T4221] Memory Limit: none
[   31.568875][ T4221] Rebooting in 86400 seconds..