last executing test programs:
3.273667959s ago: executing program 0 (id=275):
epoll_create(0x0)
3.273504177s ago: executing program 0 (id=276):
io_setup(0x0, &(0x7f0000000000))
3.188853867s ago: executing program 0 (id=282):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/uverbs0', 0x2, 0x0)
3.18840229s ago: executing program 0 (id=286):
socket$inet_udp(0x2, 0x2, 0x0)
3.169324197s ago: executing program 0 (id=287):
rt_sigreturn()
428.252575ms ago: executing program 2 (id=428):
timer_getoverrun(0x0)
357.538235ms ago: executing program 2 (id=429):
syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$video4linux(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$video4linux(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$video4linux(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$video4linux(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$video4linux(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$video4linux(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$video4linux(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$video4linux(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$video4linux(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$video4linux(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$video4linux(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$video4linux(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$video4linux(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$video4linux(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$video4linux(&(0x7f0000000500), 0x4, 0x800)
339.776416ms ago: executing program 2 (id=433):
socket$nl_rdma(0x10, 0x3, 0x14)
261.649244ms ago: executing program 3 (id=435):
readlink(&(0x7f0000000000), &(0x7f0000000000), 0x0)
259.597331ms ago: executing program 2 (id=438):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso', 0x2, 0x0)
259.295442ms ago: executing program 3 (id=439):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current', 0x2, 0x0)
238.33932ms ago: executing program 1 (id=440):
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0)
236.417442ms ago: executing program 2 (id=441):
nanosleep(&(0x7f0000000000), 0x0)
226.080585ms ago: executing program 3 (id=442):
syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$video(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$video(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$video(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$video(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$video(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$video(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$video(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$video(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$video(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$video(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$video(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$video(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$video(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$video(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$video(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$video(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$video(&(0x7f0000000500), 0x4, 0x800)
149.336544ms ago: executing program 1 (id=443):
capset(&(0x7f0000000000), &(0x7f0000000000))
149.076329ms ago: executing program 2 (id=444):
syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$audion(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$audion(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$audion(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$audion(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$audion(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$audion(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$audion(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$audion(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$audion(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$audion(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$audion(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$audion(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$audion(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$audion(&(0x7f0000000500), 0x4, 0x800)
149.001397ms ago: executing program 1 (id=445):
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
138.133092ms ago: executing program 1 (id=446):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter', 0x800, 0x0)
104.930446ms ago: executing program 3 (id=447):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci', 0x800, 0x0)
45.870403ms ago: executing program 1 (id=448):
ftruncate(0xffffffffffffffff, 0x0)
45.590293ms ago: executing program 1 (id=449):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
45.261776ms ago: executing program 3 (id=450):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng', 0x800, 0x0)
24.782848ms ago: executing program 0 (id=451):
socket$inet(0x2, 0x1, 0x0)
0s ago: executing program 3 (id=452):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse', 0x2, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts.
[ 71.105356][ T5814] cgroup: Unknown subsys name 'net'
[ 71.345822][ T5814] cgroup: Unknown subsys name 'cpuset'
[ 71.400853][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 73.089623][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 81.768291][ T32] cfg80211: failed to load regulatory.db
[ 89.662882][ T6306] ------------[ cut here ]------------
[ 89.662895][ T6306] fud->pq.processing
[ 89.662908][ T6306] WARNING: fs/fuse/dev.c:482 at fuse_dev_install_with_pq+0x23b/0x270, CPU#1: syz.3.452/6306
[ 89.662959][ T6306] Modules linked in:
[ 89.662992][ T6306] CPU: 1 UID: 0 PID: 6306 Comm: syz.3.452 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 89.663012][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 89.663023][ T6306] RIP: 0010:fuse_dev_install_with_pq+0x23b/0x270
[ 89.663047][ T6306] Code: 85 6d fe ff ff e8 55 84 84 fe 4d 85 ed 0f 94 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 36 84 84 fe 90 <0f> 0b 90 41 80 3c 2e 00 0f 85 8a fe ff ff e9 8d fe ff ff 44 89 f1
[ 89.663065][ T6306] RSP: 0018:ffffc90005bf7660 EFLAGS: 00010293
[ 89.663079][ T6306] RAX: ffffffff83406a0a RBX: ffff88802ad1e000 RCX: ffff88802d575c40
[ 89.663092][ T6306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 89.663103][ T6306] RBP: dffffc0000000000 R08: ffff888028cc8e0f R09: 1ffff110051991c1
[ 89.663116][ T6306] R10: dffffc0000000000 R11: ffffed10051991c2 R12: ffff888036e90000
[ 89.663130][ T6306] R13: ffff888028cc8e98 R14: 1ffff110051991d3 R15: ffff888028cc8e00
[ 89.663143][ T6306] FS: 000055558468d500(0000) GS:ffff888125b67000(0000) knlGS:0000000000000000
[ 89.663158][ T6306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 89.663171][ T6306] CR2: 00007faf99fbba40 CR3: 00000000424f4000 CR4: 00000000003526f0
[ 89.663191][ T6306] Call Trace:
[ 89.663198][ T6306]
[ 89.663211][ T6306] fuse_dev_alloc_install+0x61/0x80
[ 89.663234][ T6306] cuse_channel_open+0x124/0x7b0
[ 89.663257][ T6306] ? __pfx_cuse_channel_open+0x10/0x10
[ 89.663273][ T6306] misc_open+0x2de/0x350
[ 89.663294][ T6306] chrdev_open+0x4d0/0x5f0
[ 89.663313][ T6306] ? __pfx_chrdev_open+0x10/0x10
[ 89.663330][ T6306] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0
[ 89.663359][ T6306] ? __pfx_chrdev_open+0x10/0x10
[ 89.663375][ T6306] do_dentry_open+0x83d/0x13e0
[ 89.663407][ T6306] vfs_open+0x3b/0x350
[ 89.663423][ T6306] ? path_openat+0x2e2b/0x38a0
[ 89.663447][ T6306] path_openat+0x2e43/0x38a0
[ 89.663491][ T6306] ? __pfx_path_openat+0x10/0x10
[ 89.663512][ T6306] ? kasan_save_track+0x4f/0x80
[ 89.663528][ T6306] ? kasan_save_track+0x3e/0x80
[ 89.663543][ T6306] ? __kasan_slab_alloc+0x6c/0x80
[ 89.663560][ T6306] ? kmem_cache_alloc_noprof+0x33b/0x680
[ 89.663588][ T6306] ? do_raw_spin_lock+0x12b/0x2f0
[ 89.663618][ T6306] do_file_open+0x23e/0x4a0
[ 89.663639][ T6306] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 89.663666][ T6306] ? __pfx_do_file_open+0x10/0x10
[ 89.663683][ T6306] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 89.663721][ T6306] ? alloc_fd+0x64e/0x6c0
[ 89.664356][ T6306] do_sys_openat2+0x113/0x200
[ 89.664385][ T6306] ? __pfx_do_sys_openat2+0x10/0x10
[ 89.664401][ T6306] ? exc_page_fault+0x6a/0xc0
[ 89.664423][ T6306] ? do_user_addr_fault+0xc6f/0x1340
[ 89.664440][ T6306] __x64_sys_openat+0x138/0x170
[ 89.664457][ T6306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.664472][ T6306] do_syscall_64+0x15f/0xf80
[ 89.664491][ T6306] ? trace_irq_disable+0x3b/0x140
[ 89.664507][ T6306] ? clear_bhb_loop+0x40/0x90
[ 89.664525][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.664538][ T6306] RIP: 0033:0x7faf9a02c819
[ 89.664560][ T6306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 89.664571][ T6306] RSP: 002b:00007ffca5dfb9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 89.664586][ T6306] RAX: ffffffffffffffda RBX: 00007faf9a2a5fa0 RCX: 00007faf9a02c819
[ 89.664597][ T6306] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 89.664607][ T6306] RBP: 00007faf9a0c2c91 R08: 0000000000000000 R09: 0000000000000000
[ 89.664616][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 89.664625][ T6306] R13: 00007faf9a2a5fac R14: 00007faf9a2a5fa0 R15: 00007faf9a2a5fa0
[ 89.664650][ T6306]
[ 89.664659][ T6306] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 89.664671][ T6306] CPU: 1 UID: 0 PID: 6306 Comm: syz.3.452 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 89.664689][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 89.664698][ T6306] Call Trace:
[ 89.664704][ T6306]
[ 89.664710][ T6306] vpanic+0x56c/0xa60
[ 89.664731][ T6306] ? __pfx__printk+0x10/0x10
[ 89.664752][ T6306] ? __pfx_vpanic+0x10/0x10
[ 89.664767][ T6306] ? is_bpf_text_address+0x292/0x2b0
[ 89.664787][ T6306] ? is_bpf_text_address+0x26/0x2b0
[ 89.664814][ T6306] panic+0xc5/0xd0
[ 89.664844][ T6306] ? __pfx_panic+0x10/0x10
[ 89.664876][ T6306] __warn+0x315/0x4c0
[ 89.664895][ T6306] ? fuse_dev_install_with_pq+0x23b/0x270
[ 89.664921][ T6306] ? fuse_dev_install_with_pq+0x23b/0x270
[ 89.664944][ T6306] __report_bug+0x29a/0x540
[ 89.664973][ T6306] ? fuse_dev_install_with_pq+0x23b/0x270
[ 89.664996][ T6306] ? __pfx___report_bug+0x10/0x10
[ 89.665023][ T6306] ? __pfx_rtlock_slowlock_locked+0x10/0x10
[ 89.665047][ T6306] ? rt_spin_lock+0x1e0/0x400
[ 89.665065][ T6306] ? rt_spin_lock+0x1e0/0x400
[ 89.665086][ T6306] ? fuse_dev_install_with_pq+0x23b/0x270
[ 89.665108][ T6306] report_bug+0x16a/0x220
[ 89.665131][ T6306] ? fuse_dev_install_with_pq+0x23b/0x270
[ 89.665151][ T6306] ? fuse_dev_install_with_pq+0x23d/0x270
[ 89.665173][ T6306] handle_bug+0x9c/0x200
[ 89.665192][ T6306] exc_invalid_op+0x1a/0x50
[ 89.665210][ T6306] asm_exc_invalid_op+0x1a/0x20
[ 89.665227][ T6306] RIP: 0010:fuse_dev_install_with_pq+0x23b/0x270
[ 89.665251][ T6306] Code: 85 6d fe ff ff e8 55 84 84 fe 4d 85 ed 0f 94 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 36 84 84 fe 90 <0f> 0b 90 41 80 3c 2e 00 0f 85 8a fe ff ff e9 8d fe ff ff 44 89 f1
[ 89.665265][ T6306] RSP: 0018:ffffc90005bf7660 EFLAGS: 00010293
[ 89.665280][ T6306] RAX: ffffffff83406a0a RBX: ffff88802ad1e000 RCX: ffff88802d575c40
[ 89.665294][ T6306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 89.665305][ T6306] RBP: dffffc0000000000 R08: ffff888028cc8e0f R09: 1ffff110051991c1
[ 89.665318][ T6306] R10: dffffc0000000000 R11: ffffed10051991c2 R12: ffff888036e90000
[ 89.665331][ T6306] R13: ffff888028cc8e98 R14: 1ffff110051991d3 R15: ffff888028cc8e00
[ 89.665351][ T6306] ? fuse_dev_install_with_pq+0x23a/0x270
[ 89.665387][ T6306] fuse_dev_alloc_install+0x61/0x80
[ 89.665411][ T6306] cuse_channel_open+0x124/0x7b0
[ 89.665436][ T6306] ? __pfx_cuse_channel_open+0x10/0x10
[ 89.665453][ T6306] misc_open+0x2de/0x350
[ 89.665477][ T6306] chrdev_open+0x4d0/0x5f0
[ 89.665498][ T6306] ? __pfx_chrdev_open+0x10/0x10
[ 89.665516][ T6306] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0
[ 89.665545][ T6306] ? __pfx_chrdev_open+0x10/0x10
[ 89.665562][ T6306] do_dentry_open+0x83d/0x13e0
[ 89.665594][ T6306] vfs_open+0x3b/0x350
[ 89.665611][ T6306] ? path_openat+0x2e2b/0x38a0
[ 89.665637][ T6306] path_openat+0x2e43/0x38a0
[ 89.665694][ T6306] ? __pfx_path_openat+0x10/0x10
[ 89.665721][ T6306] ? kasan_save_track+0x4f/0x80
[ 89.665742][ T6306] ? kasan_save_track+0x3e/0x80
[ 89.665761][ T6306] ? __kasan_slab_alloc+0x6c/0x80
[ 89.665782][ T6306] ? kmem_cache_alloc_noprof+0x33b/0x680
[ 89.665814][ T6306] ? do_raw_spin_lock+0x12b/0x2f0
[ 89.665851][ T6306] do_file_open+0x23e/0x4a0
[ 89.665874][ T6306] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 89.665903][ T6306] ? __pfx_do_file_open+0x10/0x10
[ 89.665924][ T6306] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 89.665967][ T6306] ? alloc_fd+0x64e/0x6c0
[ 89.665999][ T6306] do_sys_openat2+0x113/0x200
[ 89.666022][ T6306] ? __pfx_do_sys_openat2+0x10/0x10
[ 89.666044][ T6306] ? exc_page_fault+0x6a/0xc0
[ 89.666070][ T6306] ? do_user_addr_fault+0xc6f/0x1340
[ 89.666093][ T6306] __x64_sys_openat+0x138/0x170
[ 89.666117][ T6306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.666135][ T6306] do_syscall_64+0x15f/0xf80
[ 89.666158][ T6306] ? trace_irq_disable+0x3b/0x140
[ 89.666179][ T6306] ? clear_bhb_loop+0x40/0x90
[ 89.666202][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.666220][ T6306] RIP: 0033:0x7faf9a02c819
[ 89.666236][ T6306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 89.666249][ T6306] RSP: 002b:00007ffca5dfb9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 89.666265][ T6306] RAX: ffffffffffffffda RBX: 00007faf9a2a5fa0 RCX: 00007faf9a02c819
[ 89.666278][ T6306] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 89.666290][ T6306] RBP: 00007faf9a0c2c91 R08: 0000000000000000 R09: 0000000000000000
[ 89.666301][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 89.666312][ T6306] R13: 00007faf9a2a5fac R14: 00007faf9a2a5fa0 R15: 00007faf9a2a5fa0
[ 89.666343][ T6306]
[ 89.666697][ T6306] Kernel Offset: disabled