last executing test programs:

94.000668ms ago: executing program 2 (id=41):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/target_ids', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/target_ids', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/target_ids', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/target_ids', 0x800, 0x0)

93.911608ms ago: executing program 3 (id=42):
recvfrom(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)

93.845768ms ago: executing program 0 (id=43):
socket$nl_generic(0x10, 0x3, 0x10)

93.458568ms ago: executing program 4 (id=44):
mmap(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

93.334888ms ago: executing program 1 (id=45):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics', 0x800, 0x0)

93.273688ms ago: executing program 3 (id=46):
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000), 0x0)

58.752269ms ago: executing program 2 (id=47):
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000), &(0x7f0000000000))

58.503369ms ago: executing program 0 (id=48):
lgetxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0)

58.379299ms ago: executing program 4 (id=49):
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$sndctrl(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$sndctrl(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$sndctrl(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$sndctrl(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$sndctrl(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$sndctrl(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$sndctrl(&(0x7f0000000500), 0x4, 0x800)

58.307959ms ago: executing program 3 (id=50):
ptrace(0x0, 0x0)

58.246209ms ago: executing program 0 (id=51):
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000))

58.214279ms ago: executing program 1 (id=52):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/revoke-subject', 0x2, 0x0)

58.154149ms ago: executing program 2 (id=53):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem', 0x1, 0x0)

58.092369ms ago: executing program 3 (id=54):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x0)

58.034879ms ago: executing program 4 (id=55):
io_uring_setup(0x0, &(0x7f0000000000))

31.45124ms ago: executing program 1 (id=56):
fspick(0xffffffffffffffff, &(0x7f0000000000), 0x0)

31.30401ms ago: executing program 0 (id=57):
futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0)

31.23418ms ago: executing program 2 (id=58):
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs', 0x1, 0x0)

31.17745ms ago: executing program 3 (id=59):
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x800)

31.09361ms ago: executing program 4 (id=60):
getrusage(0x0, &(0x7f0000000000))

30.99921ms ago: executing program 1 (id=61):
sendto(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)

30.83632ms ago: executing program 2 (id=62):
munmap(0x0, 0x0)

30.49824ms ago: executing program 4 (id=63):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/failslab/probability', 0x1, 0x0)

512.8µs ago: executing program 1 (id=64):
recvmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0)

415.23µs ago: executing program 0 (id=65):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/trusty-ipc-dev0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/trusty-ipc-dev0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/trusty-ipc-dev0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/trusty-ipc-dev0', 0x800, 0x0)

245.12µs ago: executing program 3 (id=66):
init_module(&(0x7f0000000000), 0x0, &(0x7f0000000000))

167.51µs ago: executing program 0 (id=67):
read(0xffffffffffffffff, &(0x7f0000000000), 0x0)

99.28µs ago: executing program 1 (id=68):
chdir(&(0x7f0000000000))

65.851µs ago: executing program 4 (id=69):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock', 0x2, 0x0)

0s ago: executing program 2 (id=70):
sched_setscheduler(0x0, 0x0, &(0x7f0000000000))

0s ago: executing program 3 (id=74):
io_destroy(0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts.
[   30.902089][ T4037] cgroup: Unknown subsys name 'net'
[   31.176319][ T4037] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   31.461837][ T4037] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   32.464978][ T4127] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
[   32.466436][ T4127] Modules linked in:
SYZFAIL: failed to recv rpc
[   32.467131][ T4127] CPU: 0 PID: 4127 Comm: syz.3.74 Not tainted syzkaller #0
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   32.468375][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   32.470150][ T4127] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
[   32.471534][ T4127] pc : lookup_ioctx+0x10c/0x7c0
[   32.472318][ T4127] lr : lookup_ioctx+0xe8/0x7c0
[   32.473139][ T4127] sp : ffff80001fa17c40
[   32.473861][ T4127] x29: ffff80001fa17c40 x28: ffff0000ccd88000 x27: 0000000000000000
[   32.475268][ T4127] x26: 1fffe000199b1000 x25: 1ffff00003f42fd6 x24: ffff0000cab63f40
[   32.476692][ T4127] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000
[   32.478134][ T4127] x20: ffff0000ccd88000 x19: 0000000000000000 x18: 0000000000000000
[   32.479616][ T4127] x17: 0000000000000000 x16: ffff800008a309dc x15: 0000000000000000
[   32.480935][ T4127] x14: 0000000000000003 x13: 1ffff0000288002b x12: 0000000097863b1e
[   32.482284][ T4127] x11: ff80800008a309b8 x10: 0000000000000000 x9 : 0000ffffffffffff
[   32.483633][ T4127] x8 : 0000000000000000 x7 : ffff800008762ed0 x6 : 0000000000000000
[   32.485011][ T4127] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
[   32.486313][ T4127] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000
[   32.487698][ T4127] Call trace:
[   32.488230][ T4127]  lookup_ioctx+0x10c/0x7c0
[   32.489036][ T4127]  __arm64_sys_io_destroy+0x9c/0x1d8
[   32.489938][ T4127]  invoke_syscall+0x98/0x28c
[   32.490688][ T4127]  el0_svc_common+0x13c/0x258
[   32.491471][ T4127]  do_el0_svc+0x5c/0x140
[   32.492206][ T4127]  el0_svc+0x78/0x1d0
[   32.492897][ T4127]  el0t_64_sync_handler+0xcc/0xe4
[   32.493766][ T4127]  el0t_64_sync+0x1a0/0x1a4
[   32.494538][ T4127] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) 
[   32.495676][ T4127] ---[ end trace 34d424d17cc1287a ]---
[   32.668014][ T4127] Kernel panic - not syncing: Oops - BTI: Fatal exception
[   32.669178][ T4127] SMP: stopping secondary CPUs
[   32.669960][ T4127] Kernel Offset: disabled
[   32.670648][ T4127] CPU features: 0xa,000003c1,7d33ffd9
[   32.671490][ T4127] Memory Limit: none
[   32.831336][ T4127] Rebooting in 86400 seconds..