program: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="736d61636b66737472616e736d7574653d282c2fb32e252c66736d616769633d3078303030303030303030303030303037332c66756e633d4d4f44554c455f434845434b2c6d61736b3d5e4d41595f455845432c7375626a5f747970653d40263a2d402c736d61636b66736465663d716e7834002c646566636f6e746578743d737942a157b73b22de387988f112fb0a30977374656d5f752c00"], 0x1, 0x1a2, &(0x7f0000000280)="$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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010101, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in=@empty, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4847d052}, {0x0, 0x200000000}, {}, 0x1, 0x0, 0x2, 0x4, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa810100, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xffffffffffff065c, 0x4, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xffffffffe, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x1}, 0x1c) r4 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_pidfd_open(r4, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0xff06) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb42, 0x870, 0x1, 0x1, 0xf59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x440, 0x2600, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x1, 0x0, 0x1, 0x0, 0x76, 0x2, 0x3, 0x3ff, 0x7, 0xffff7fff, 0xffffffff, 0x0, 0x0, 0x0, 0x1b, 0x2, {0x7, 0xffff}, 0x4, 0x7}}) [ 59.107692][ T5322] loop0: detected capacity change from 0 to 8 [ 59.117072][ T5322] squashfs: Unknown parameter 'smackfstransmute' [ 59.222506][ T5322] ------------[ cut here ]------------ [ 59.224937][ T5322] WARNING: CPU: 0 PID: 5322 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190 [ 59.228399][ T5322] Modules linked in: [ 59.230861][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 59.234785][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.238804][ T5322] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 59.241433][ T5322] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 8f e3 b9 ff 41 81 e7 00 20 00 00 74 0a e8 41 df b9 ff e9 3b ff ff ff e8 37 df b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 59.248440][ T5322] RSP: 0018:ffffc9000d48f930 EFLAGS: 00010287 [ 59.250598][ T5322] RAX: ffffffff81dafb29 RBX: 00000000ed5e1000 RCX: 0000000000040000 [ 59.253153][ T5322] RDX: ffffc9000d7a9000 RSI: 00000000000007b0 RDI: 00000000000007b1 [ 59.255666][ T5322] RBP: 0000000000000000 R08: ffffffff81dafb11 R09: 00000000ffffffff [ 59.258220][ T5322] R10: ffffc9000d48f7a0 R11: fffff52001a91ef9 R12: 00000000ed5e1000 [ 59.260903][ T5322] R13: ffffc9000d48fa60 R14: 00000000ffffffff R15: 0000000000000000 [ 59.263605][ T5322] FS: 00007f2166cb26c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 59.267002][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.269675][ T5322] CR2: 0000000020000000 CR3: 00000000433aa000 CR4: 0000000000352ef0 [ 59.272348][ T5322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.275182][ T5322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.278071][ T5322] Call Trace: [ 59.279385][ T5322] [ 59.280368][ T5322] ? __warn+0x168/0x4e0 [ 59.281847][ T5322] ? __kvmalloc_node_noprof+0x17a/0x190 [ 59.283998][ T5322] ? report_bug+0x2b3/0x500 [ 59.285815][ T5322] ? __kvmalloc_node_noprof+0x17a/0x190 [ 59.287749][ T5322] ? handle_bug+0x60/0x90 [ 59.289252][ T5322] ? exc_invalid_op+0x1a/0x50 [ 59.291085][ T5322] ? asm_exc_invalid_op+0x1a/0x20 [ 59.292977][ T5322] ? __kvmalloc_node_noprof+0x161/0x190 [ 59.295087][ T5322] ? __kvmalloc_node_noprof+0x179/0x190 [ 59.297234][ T5322] ? __kvmalloc_node_noprof+0x17a/0x190 [ 59.299331][ T5322] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 59.302060][ T5322] ? tpg_update_mv_step+0x361/0x4f0 [ 59.304068][ T5322] vivid_update_format_cap+0x133c/0x2090 [ 59.305934][ T5322] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 59.307820][ T5322] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 59.310109][ T5322] __video_do_ioctl+0xc23/0xdd0 [ 59.312075][ T5322] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.314025][ T5322] ? __might_fault+0xc6/0x120 [ 59.315814][ T5322] video_usercopy+0x89b/0x1180 [ 59.317629][ T5322] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.319735][ T5322] ? __pfx_video_usercopy+0x10/0x10 [ 59.321668][ T5322] ? __fget_files+0x29/0x470 [ 59.323313][ T5322] ? __fget_files+0x3f3/0x470 [ 59.324980][ T5322] v4l2_ioctl+0x189/0x1e0 [ 59.326913][ T5322] ? __pfx_v4l2_ioctl+0x10/0x10 [ 59.328887][ T5322] __se_sys_ioctl+0xf9/0x170 [ 59.330958][ T5322] do_syscall_64+0xf3/0x230 [ 59.332673][ T5322] ? clear_bhb_loop+0x35/0x90 [ 59.334492][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.336715][ T5322] RIP: 0033:0x7f2165f7e719 [ 59.338484][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.345687][ T5322] RSP: 002b:00007f2166cb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.348629][ T5322] RAX: ffffffffffffffda RBX: 00007f2166135f80 RCX: 00007f2165f7e719 [ 59.351663][ T5322] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000009 [ 59.354615][ T5322] RBP: 00007f2165ff139e R08: 0000000000000000 R09: 0000000000000000 [ 59.357737][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.360850][ T5322] R13: 0000000000000000 R14: 00007f2166135f80 R15: 00007ffc996dd458 [ 59.363824][ T5322] [ 59.364862][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 59.367497][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 59.371133][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.374849][ T5322] Call Trace: [ 59.376049][ T5322] [ 59.377174][ T5322] dump_stack_lvl+0x241/0x360 [ 59.379012][ T5322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.381045][ T5322] ? __pfx__printk+0x10/0x10 [ 59.382796][ T5322] ? _printk+0xd5/0x120 [ 59.384391][ T5322] ? __init_begin+0x41000/0x41000 [ 59.386375][ T5322] ? vscnprintf+0x5d/0x90 [ 59.388066][ T5322] panic+0x349/0x880 [ 59.389482][ T5322] ? __warn+0x177/0x4e0 [ 59.391078][ T5322] ? __pfx_panic+0x10/0x10 [ 59.392743][ T5322] ? show_trace_log_lvl+0x3b2/0x410 [ 59.394584][ T5322] __warn+0x34b/0x4e0 [ 59.396213][ T5322] ? __kvmalloc_node_noprof+0x17a/0x190 [ 59.398151][ T5322] report_bug+0x2b3/0x500 [ 59.399639][ T5322] ? __kvmalloc_node_noprof+0x17a/0x190 [ 59.401604][ T5322] handle_bug+0x60/0x90 [ 59.403112][ T5322] exc_invalid_op+0x1a/0x50 [ 59.404755][ T5322] asm_exc_invalid_op+0x1a/0x20 [ 59.406661][ T5322] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 59.409145][ T5322] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 8f e3 b9 ff 41 81 e7 00 20 00 00 74 0a e8 41 df b9 ff e9 3b ff ff ff e8 37 df b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 59.416101][ T5322] RSP: 0018:ffffc9000d48f930 EFLAGS: 00010287 [ 59.418378][ T5322] RAX: ffffffff81dafb29 RBX: 00000000ed5e1000 RCX: 0000000000040000 [ 59.420934][ T5322] RDX: ffffc9000d7a9000 RSI: 00000000000007b0 RDI: 00000000000007b1 [ 59.423737][ T5322] RBP: 0000000000000000 R08: ffffffff81dafb11 R09: 00000000ffffffff [ 59.426687][ T5322] R10: ffffc9000d48f7a0 R11: fffff52001a91ef9 R12: 00000000ed5e1000 [ 59.429679][ T5322] R13: ffffc9000d48fa60 R14: 00000000ffffffff R15: 0000000000000000 [ 59.432522][ T5322] ? __kvmalloc_node_noprof+0x161/0x190 [ 59.434632][ T5322] ? __kvmalloc_node_noprof+0x179/0x190 [ 59.436635][ T5322] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 59.438757][ T5322] ? tpg_update_mv_step+0x361/0x4f0 [ 59.440647][ T5322] vivid_update_format_cap+0x133c/0x2090 [ 59.442710][ T5322] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 59.444892][ T5322] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 59.447052][ T5322] __video_do_ioctl+0xc23/0xdd0 [ 59.448913][ T5322] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.450871][ T5322] ? __might_fault+0xc6/0x120 [ 59.452555][ T5322] video_usercopy+0x89b/0x1180 [ 59.454254][ T5322] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.456107][ T5322] ? __pfx_video_usercopy+0x10/0x10 [ 59.457994][ T5322] ? __fget_files+0x29/0x470 [ 59.459657][ T5322] ? __fget_files+0x3f3/0x470 [ 59.461431][ T5322] v4l2_ioctl+0x189/0x1e0 [ 59.462983][ T5322] ? __pfx_v4l2_ioctl+0x10/0x10 [ 59.464851][ T5322] __se_sys_ioctl+0xf9/0x170 [ 59.466483][ T5322] do_syscall_64+0xf3/0x230 [ 59.468077][ T5322] ? clear_bhb_loop+0x35/0x90 [ 59.469802][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.472053][ T5322] RIP: 0033:0x7f2165f7e719 [ 59.473760][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.480735][ T5322] RSP: 002b:00007f2166cb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.483833][ T5322] RAX: ffffffffffffffda RBX: 00007f2166135f80 RCX: 00007f2165f7e719 [ 59.486781][ T5322] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000009 [ 59.489660][ T5322] RBP: 00007f2165ff139e R08: 0000000000000000 R09: 0000000000000000 [ 59.492575][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.495483][ T5322] R13: 0000000000000000 R14: 00007f2166135f80 R15: 00007ffc996dd458 [ 59.498222][ T5322] [ 59.499514][ T5322] Kernel Offset: disabled [ 59.501226][ T5322] Rebooting in 86400 seconds..