program: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb43, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x440, 0x401, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x8}}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xea) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb43, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x440, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000003b0207010000000000000000047c00001f8481964d0000004e1a4c657fddc3f1ebd31f6c844c4e451adb6559f1465d60480fbb9e7eb1003dfd0f9bf2d3746754b182ef834cd835c3e737c5af22e59f8fd5375cbab074f30ba4683954577733f6fd3eef8d26e3f9e89e21fdfad752f3662af90794de9863640c9fce7f56b2a3f126c124e9720f4ea0cbae0173fd275b8bbf35e9723fa062406e6d34ec4730de8da4ad5c67c3e58a7dc4ba55e67b83ab2cb08dd9c5715b2942311083b9ea8d2c2a1cb320820d8c7f4cb2fee3642d6ea574ac6856e8dad3756d3858a828c05d8fcbf634f3be5266a4a4"], 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x4000000) [ 77.359005][ T5321] Bluetooth: hci0: command tx timeout [ 77.362488][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.365601][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.482752][ T5336] ------------[ cut here ]------------ [ 77.484953][ T5336] WARNING: CPU: 0 PID: 5336 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190 [ 77.488435][ T5336] Modules linked in: [ 77.489891][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00322-gb9021de3ec2f #0 [ 77.493580][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.497522][ T5336] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 77.499600][ T5336] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 cf e5 b9 ff 41 81 e7 00 20 00 00 74 0a e8 81 e1 b9 ff e9 3b ff ff ff e8 77 e1 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 77.506642][ T5336] RSP: 0018:ffffc9000d147930 EFLAGS: 00010293 [ 77.509071][ T5336] RAX: ffffffff81daf829 RBX: 0000000081f5e800 RCX: ffff88803ab20000 [ 77.511828][ T5336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.514659][ T5336] RBP: 0000000000000000 R08: ffffffff81daf811 R09: 00000000ffffffff [ 77.517566][ T5336] R10: ffffc9000d1477a0 R11: fffff52001a28ef9 R12: 0000000081f5e800 [ 77.520431][ T5336] R13: ffffc9000d147a60 R14: 00000000ffffffff R15: 0000000000000000 [ 77.523290][ T5336] FS: 00007fb4add266c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 77.526425][ T5336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.528662][ T5336] CR2: 0000000000000003 CR3: 000000004310c000 CR4: 0000000000352ef0 [ 77.531714][ T5336] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.534878][ T5336] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.539079][ T5336] Call Trace: [ 77.540387][ T5336] [ 77.541504][ T5336] ? __warn+0x168/0x4e0 [ 77.543093][ T5336] ? __kvmalloc_node_noprof+0x17a/0x190 [ 77.545191][ T5336] ? report_bug+0x2b3/0x500 [ 77.547142][ T5336] ? __kvmalloc_node_noprof+0x17a/0x190 [ 77.549493][ T5336] ? handle_bug+0x60/0x90 [ 77.551336][ T5336] ? exc_invalid_op+0x1a/0x50 [ 77.553309][ T5336] ? asm_exc_invalid_op+0x1a/0x20 [ 77.555508][ T5336] ? __kvmalloc_node_noprof+0x161/0x190 [ 77.557951][ T5336] ? __kvmalloc_node_noprof+0x179/0x190 [ 77.560243][ T5336] ? __kvmalloc_node_noprof+0x17a/0x190 [ 77.562607][ T5336] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 77.565092][ T5336] ? tpg_update_mv_step+0x361/0x4f0 [ 77.567667][ T5336] vivid_update_format_cap+0x133c/0x2090 [ 77.570103][ T5336] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 77.572370][ T5336] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 77.574399][ T5336] __video_do_ioctl+0xc23/0xdd0 [ 77.576433][ T5336] ? __pfx___video_do_ioctl+0x10/0x10 [ 77.578076][ T5336] ? __might_fault+0xc6/0x120 [ 77.579574][ T5336] video_usercopy+0x89b/0x1180 [ 77.581101][ T5336] ? __pfx___video_do_ioctl+0x10/0x10 [ 77.583186][ T5336] ? __pfx_video_usercopy+0x10/0x10 [ 77.584945][ T5336] ? __fget_files+0x29/0x470 [ 77.586642][ T5336] ? __fget_files+0x3f3/0x470 [ 77.588198][ T5336] v4l2_ioctl+0x189/0x1e0 [ 77.589836][ T5336] ? __pfx_v4l2_ioctl+0x10/0x10 [ 77.591646][ T5336] __se_sys_ioctl+0xf9/0x170 [ 77.593245][ T5336] do_syscall_64+0xf3/0x230 [ 77.594935][ T5336] ? clear_bhb_loop+0x35/0x90 [ 77.596519][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.598628][ T5336] RIP: 0033:0x7fb4acf7e719 [ 77.600108][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.606481][ T5336] RSP: 002b:00007fb4add26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.609417][ T5336] RAX: ffffffffffffffda RBX: 00007fb4ad135f80 RCX: 00007fb4acf7e719 [ 77.612213][ T5336] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000004 [ 77.615006][ T5336] RBP: 00007fb4acff132e R08: 0000000000000000 R09: 0000000000000000 [ 77.618007][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.620683][ T5336] R13: 0000000000000000 R14: 00007fb4ad135f80 R15: 00007ffdcc849ae8 [ 77.623487][ T5336] [ 77.624554][ T5336] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.627073][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00322-gb9021de3ec2f #0 [ 77.630249][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.634031][ T5336] Call Trace: [ 77.635260][ T5336] [ 77.636279][ T5336] dump_stack_lvl+0x241/0x360 [ 77.637988][ T5336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.639923][ T5336] ? __pfx__printk+0x10/0x10 [ 77.641575][ T5336] ? _printk+0xd5/0x120 [ 77.642846][ T5336] ? __init_begin+0x41000/0x41000 [ 77.644455][ T5336] ? vscnprintf+0x5d/0x90 [ 77.646003][ T5336] panic+0x349/0x880 [ 77.647488][ T5336] ? __warn+0x177/0x4e0 [ 77.649072][ T5336] ? __pfx_panic+0x10/0x10 [ 77.650737][ T5336] ? show_trace_log_lvl+0x3b2/0x410 [ 77.652640][ T5336] __warn+0x34b/0x4e0 [ 77.654148][ T5336] ? __kvmalloc_node_noprof+0x17a/0x190 [ 77.656218][ T5336] report_bug+0x2b3/0x500 [ 77.657894][ T5336] ? __kvmalloc_node_noprof+0x17a/0x190 [ 77.659551][ T5336] handle_bug+0x60/0x90 [ 77.660865][ T5336] exc_invalid_op+0x1a/0x50 [ 77.662408][ T5336] asm_exc_invalid_op+0x1a/0x20 [ 77.663953][ T5336] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 77.666080][ T5336] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 cf e5 b9 ff 41 81 e7 00 20 00 00 74 0a e8 81 e1 b9 ff e9 3b ff ff ff e8 77 e1 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 77.673308][ T5336] RSP: 0018:ffffc9000d147930 EFLAGS: 00010293 [ 77.675745][ T5336] RAX: ffffffff81daf829 RBX: 0000000081f5e800 RCX: ffff88803ab20000 [ 77.678628][ T5336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.681515][ T5336] RBP: 0000000000000000 R08: ffffffff81daf811 R09: 00000000ffffffff [ 77.684384][ T5336] R10: ffffc9000d1477a0 R11: fffff52001a28ef9 R12: 0000000081f5e800 [ 77.687194][ T5336] R13: ffffc9000d147a60 R14: 00000000ffffffff R15: 0000000000000000 [ 77.690195][ T5336] ? __kvmalloc_node_noprof+0x161/0x190 [ 77.692294][ T5336] ? __kvmalloc_node_noprof+0x179/0x190 [ 77.694455][ T5336] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 77.696648][ T5336] ? tpg_update_mv_step+0x361/0x4f0 [ 77.698551][ T5336] vivid_update_format_cap+0x133c/0x2090 [ 77.700641][ T5336] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 77.702854][ T5336] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 77.704836][ T5336] __video_do_ioctl+0xc23/0xdd0 [ 77.706392][ T5336] ? __pfx___video_do_ioctl+0x10/0x10 [ 77.708250][ T5336] ? __might_fault+0xc6/0x120 [ 77.709700][ T5336] video_usercopy+0x89b/0x1180 [ 77.711110][ T5336] ? __pfx___video_do_ioctl+0x10/0x10 [ 77.712642][ T5336] ? __pfx_video_usercopy+0x10/0x10 [ 77.714355][ T5336] ? __fget_files+0x29/0x470 [ 77.715661][ T5336] ? __fget_files+0x3f3/0x470 [ 77.716956][ T5336] v4l2_ioctl+0x189/0x1e0 [ 77.718552][ T5336] ? __pfx_v4l2_ioctl+0x10/0x10 [ 77.720627][ T5336] __se_sys_ioctl+0xf9/0x170 [ 77.722640][ T5336] do_syscall_64+0xf3/0x230 [ 77.724429][ T5336] ? clear_bhb_loop+0x35/0x90 [ 77.726297][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.728658][ T5336] RIP: 0033:0x7fb4acf7e719 [ 77.730428][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.738123][ T5336] RSP: 002b:00007fb4add26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.741001][ T5336] RAX: ffffffffffffffda RBX: 00007fb4ad135f80 RCX: 00007fb4acf7e719 [ 77.743916][ T5336] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000004 [ 77.746931][ T5336] RBP: 00007fb4acff132e R08: 0000000000000000 R09: 0000000000000000 [ 77.749834][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.752716][ T5336] R13: 0000000000000000 R14: 00007fb4ad135f80 R15: 00007ffdcc849ae8 [ 77.755681][ T5336] [ 77.757129][ T5336] Kernel Offset: disabled [ 77.758807][ T5336] Rebooting in 86400 seconds..