program:
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2800, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})
[ 60.036165][ T5096] Bluetooth: hci0: command tx timeout
[ 60.110471][ T5109] ------------[ cut here ]------------
[ 60.112697][ T5109] WARNING: CPU: 0 PID: 5109 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190
[ 60.116535][ T5109] Modules linked in:
[ 60.118060][ T5109] CPU: 0 UID: 0 PID: 5109 Comm: syz.0.0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[ 60.121802][ T5109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 60.126192][ T5109] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190
[ 60.128640][ T5109] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 bf dd b9 ff 41 81 e7 00 20 00 00 74 0a e8 71 d9 b9 ff e9 3b ff ff ff e8 67 d9 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00
[ 60.135678][ T5109] RSP: 0018:ffffc9000b507930 EFLAGS: 00010287
[ 60.138284][ T5109] RAX: ffffffff81dafe79 RBX: 00000000a3484400 RCX: 0000000000040000
[ 60.141147][ T5109] RDX: ffffc9000b269000 RSI: 00000000000007b0 RDI: 00000000000007b1
[ 60.144155][ T5109] RBP: 0000000000000000 R08: ffffffff81dafe61 R09: 00000000ffffffff
[ 60.147591][ T5109] R10: ffffc9000b5077a0 R11: fffff520016a0ef9 R12: 00000000a3484400
[ 60.150605][ T5109] R13: ffffc9000b507a60 R14: 00000000ffffffff R15: 0000000000000000
[ 60.153684][ T5109] FS: 00007f8c912f56c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 60.157454][ T5109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 60.159981][ T5109] CR2: 00007f8c90723dd8 CR3: 0000000040ed8000 CR4: 0000000000352ef0
[ 60.163023][ T5109] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 60.166061][ T5109] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 60.168946][ T5109] Call Trace:
[ 60.170259][ T5109]
[ 60.171394][ T5109] ? __warn+0x168/0x4e0
[ 60.172962][ T5109] ? __kvmalloc_node_noprof+0x17a/0x190
[ 60.174981][ T5109] ? report_bug+0x2b3/0x500
[ 60.176854][ T5109] ? __kvmalloc_node_noprof+0x17a/0x190
[ 60.178922][ T5109] ? handle_bug+0x60/0x90
[ 60.180514][ T5109] ? exc_invalid_op+0x1a/0x50
[ 60.182277][ T5109] ? asm_exc_invalid_op+0x1a/0x20
[ 60.184497][ T5109] ? __kvmalloc_node_noprof+0x161/0x190
[ 60.186921][ T5109] ? __kvmalloc_node_noprof+0x179/0x190
[ 60.189069][ T5109] ? __kvmalloc_node_noprof+0x17a/0x190
[ 60.191189][ T5109] __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[ 60.193524][ T5109] ? tpg_update_mv_step+0x361/0x4f0
[ 60.195529][ T5109] vivid_update_format_cap+0x133c/0x2090
[ 60.197852][ T5109] ? __pfx_vivid_update_format_cap+0x10/0x10
[ 60.200126][ T5109] vivid_vid_cap_s_dv_timings+0x535/0x1230
[ 60.202365][ T5109] __video_do_ioctl+0xc23/0xdd0
[ 60.204269][ T5109] ? __pfx___video_do_ioctl+0x10/0x10
[ 60.206424][ T5109] ? __might_fault+0xc6/0x120
[ 60.208217][ T5109] video_usercopy+0x89b/0x1180
[ 60.210071][ T5109] ? __pfx___video_do_ioctl+0x10/0x10
[ 60.212128][ T5109] ? __pfx_video_usercopy+0x10/0x10
[ 60.214085][ T5109] ? __fget_files+0x29/0x470
[ 60.215755][ T5109] ? __fget_files+0x3f3/0x470
[ 60.217598][ T5109] v4l2_ioctl+0x189/0x1e0
[ 60.219221][ T5109] ? __pfx_v4l2_ioctl+0x10/0x10
[ 60.221044][ T5109] __se_sys_ioctl+0xf9/0x170
[ 60.222823][ T5109] do_syscall_64+0xf3/0x230
[ 60.224454][ T5109] ? clear_bhb_loop+0x35/0x90
[ 60.226345][ T5109] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 60.228575][ T5109] RIP: 0033:0x7f8c9057dff9
[ 60.230277][ T5109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 60.237651][ T5109] RSP: 002b:00007f8c912f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 60.240827][ T5109] RAX: ffffffffffffffda RBX: 00007f8c90735f80 RCX: 00007f8c9057dff9
[ 60.243779][ T5109] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003
[ 60.246865][ T5109] RBP: 00007f8c905f0296 R08: 0000000000000000 R09: 0000000000000000
[ 60.249831][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 60.252874][ T5109] R13: 0000000000000000 R14: 00007f8c90735f80 R15: 00007ffc86a2da88
[ 60.256085][ T5109]
[ 60.257259][ T5109] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 60.259936][ T5109] CPU: 0 UID: 0 PID: 5109 Comm: syz.0.0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[ 60.263639][ T5109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 60.267569][ T5109] Call Trace:
[ 60.268779][ T5109]
[ 60.269942][ T5109] dump_stack_lvl+0x241/0x360
[ 60.271709][ T5109] ? __pfx_dump_stack_lvl+0x10/0x10
[ 60.273365][ T5109] ? __pfx__printk+0x10/0x10
[ 60.275099][ T5109] ? _printk+0xd5/0x120
[ 60.276743][ T5109] ? __init_begin+0x41000/0x41000
[ 60.278700][ T5109] ? vscnprintf+0x5d/0x90
[ 60.280237][ T5109] panic+0x349/0x880
[ 60.281698][ T5109] ? __warn+0x177/0x4e0
[ 60.283286][ T5109] ? __pfx_panic+0x10/0x10
[ 60.284998][ T5109] ? show_trace_log_lvl+0x3b2/0x410
[ 60.286989][ T5109] __warn+0x34b/0x4e0
[ 60.288565][ T5109] ? __kvmalloc_node_noprof+0x17a/0x190
[ 60.290707][ T5109] report_bug+0x2b3/0x500
[ 60.292065][ T5109] ? __kvmalloc_node_noprof+0x17a/0x190
[ 60.293970][ T5109] handle_bug+0x60/0x90
[ 60.295479][ T5109] exc_invalid_op+0x1a/0x50
[ 60.297011][ T5109] asm_exc_invalid_op+0x1a/0x20
[ 60.298784][ T5109] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190
[ 60.300934][ T5109] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 bf dd b9 ff 41 81 e7 00 20 00 00 74 0a e8 71 d9 b9 ff e9 3b ff ff ff e8 67 d9 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00
[ 60.307812][ T5109] RSP: 0018:ffffc9000b507930 EFLAGS: 00010287
[ 60.309991][ T5109] RAX: ffffffff81dafe79 RBX: 00000000a3484400 RCX: 0000000000040000
[ 60.312711][ T5109] RDX: ffffc9000b269000 RSI: 00000000000007b0 RDI: 00000000000007b1
[ 60.315588][ T5109] RBP: 0000000000000000 R08: ffffffff81dafe61 R09: 00000000ffffffff
[ 60.318518][ T5109] R10: ffffc9000b5077a0 R11: fffff520016a0ef9 R12: 00000000a3484400
[ 60.321536][ T5109] R13: ffffc9000b507a60 R14: 00000000ffffffff R15: 0000000000000000
[ 60.324471][ T5109] ? __kvmalloc_node_noprof+0x161/0x190
[ 60.326471][ T5109] ? __kvmalloc_node_noprof+0x179/0x190
[ 60.328445][ T5109] __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[ 60.330595][ T5109] ? tpg_update_mv_step+0x361/0x4f0
[ 60.332462][ T5109] vivid_update_format_cap+0x133c/0x2090
[ 60.334581][ T5109] ? __pfx_vivid_update_format_cap+0x10/0x10
[ 60.336856][ T5109] vivid_vid_cap_s_dv_timings+0x535/0x1230
[ 60.339089][ T5109] __video_do_ioctl+0xc23/0xdd0
[ 60.340872][ T5109] ? __pfx___video_do_ioctl+0x10/0x10
[ 60.342885][ T5109] ? __might_fault+0xc6/0x120
[ 60.344696][ T5109] video_usercopy+0x89b/0x1180
[ 60.346455][ T5109] ? __pfx___video_do_ioctl+0x10/0x10
[ 60.348442][ T5109] ? __pfx_video_usercopy+0x10/0x10
[ 60.350418][ T5109] ? __fget_files+0x29/0x470
[ 60.352129][ T5109] ? __fget_files+0x3f3/0x470
[ 60.353807][ T5109] v4l2_ioctl+0x189/0x1e0
[ 60.355433][ T5109] ? __pfx_v4l2_ioctl+0x10/0x10
[ 60.357294][ T5109] __se_sys_ioctl+0xf9/0x170
[ 60.359005][ T5109] do_syscall_64+0xf3/0x230
[ 60.360597][ T5109] ? clear_bhb_loop+0x35/0x90
[ 60.362320][ T5109] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 60.364472][ T5109] RIP: 0033:0x7f8c9057dff9
[ 60.366112][ T5109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 60.373199][ T5109] RSP: 002b:00007f8c912f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 60.376275][ T5109] RAX: ffffffffffffffda RBX: 00007f8c90735f80 RCX: 00007f8c9057dff9
[ 60.379198][ T5109] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003
[ 60.382098][ T5109] RBP: 00007f8c905f0296 R08: 0000000000000000 R09: 0000000000000000
[ 60.384977][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 60.387960][ T5109] R13: 0000000000000000 R14: 00007f8c90735f80 R15: 00007ffc86a2da88
[ 60.390954][ T5109]
[ 60.392386][ T5109] Kernel Offset: disabled
[ 60.394059][ T5109] Rebooting in 86400 seconds..