program: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x4, 0x19ef, 0x3, 0x6, 0x27fd, 0x2800, 0x1000, 0x3, 0xd, 0x3, {0x8, 0xffffffff}, 0xcd, 0x7}}) [ 75.180019][ T5310] Bluetooth: hci0: command tx timeout [ 75.311390][ T5326] ------------[ cut here ]------------ [ 75.313678][ T5326] WARNING: CPU: 0 PID: 5326 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190 [ 75.317489][ T5326] Modules linked in: [ 75.318952][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 [ 75.322674][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.326775][ T5326] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 75.329380][ T5326] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 df e0 b9 ff 41 81 e7 00 20 00 00 74 0a e8 91 dc b9 ff e9 3b ff ff ff e8 87 dc b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 75.336462][ T5326] RSP: 0018:ffffc9000d31f930 EFLAGS: 00010293 [ 75.339060][ T5326] RAX: ffffffff81db1489 RBX: 0000000088203400 RCX: ffff888000f9a440 [ 75.342039][ T5326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.345057][ T5326] RBP: 0000000000000000 R08: ffffffff81db1471 R09: 00000000ffffffff [ 75.348122][ T5326] R10: ffffc9000d31f7a0 R11: fffff52001a63ef9 R12: 0000000088203400 [ 75.350960][ T5326] R13: ffffc9000d31fa60 R14: 00000000ffffffff R15: 0000000000000000 [ 75.353841][ T5326] FS: 00007f76e4e1b6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 75.357545][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.359948][ T5326] CR2: 00007f76e4e1af98 CR3: 000000003ab4e000 CR4: 0000000000352ef0 [ 75.363488][ T5326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.366582][ T5326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.370081][ T5326] Call Trace: [ 75.371343][ T5326] [ 75.372475][ T5326] ? __warn+0x168/0x4e0 [ 75.374032][ T5326] ? __kvmalloc_node_noprof+0x17a/0x190 [ 75.376040][ T5326] ? report_bug+0x2b3/0x500 [ 75.377811][ T5326] ? __kvmalloc_node_noprof+0x17a/0x190 [ 75.379833][ T5326] ? handle_bug+0x60/0x90 [ 75.381601][ T5326] ? exc_invalid_op+0x1a/0x50 [ 75.383346][ T5326] ? asm_exc_invalid_op+0x1a/0x20 [ 75.385069][ T5326] ? __kvmalloc_node_noprof+0x161/0x190 [ 75.387263][ T5326] ? __kvmalloc_node_noprof+0x179/0x190 [ 75.389369][ T5326] ? __kvmalloc_node_noprof+0x17a/0x190 [ 75.391439][ T5326] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 75.393615][ T5326] ? tpg_update_mv_step+0x361/0x4f0 [ 75.395604][ T5326] vivid_update_format_cap+0x133c/0x2090 [ 75.397827][ T5326] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 75.400114][ T5326] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 75.402240][ T5326] __video_do_ioctl+0xc23/0xdd0 [ 75.404038][ T5326] ? __pfx___video_do_ioctl+0x10/0x10 [ 75.406061][ T5326] ? __might_fault+0xc6/0x120 [ 75.407987][ T5326] video_usercopy+0x89b/0x1180 [ 75.409839][ T5326] ? __pfx___video_do_ioctl+0x10/0x10 [ 75.411867][ T5326] ? __pfx_video_usercopy+0x10/0x10 [ 75.413870][ T5326] ? __fget_files+0x2a/0x410 [ 75.415561][ T5326] ? __fget_files+0x2a/0x410 [ 75.417742][ T5326] v4l2_ioctl+0x189/0x1e0 [ 75.419527][ T5326] ? __pfx_v4l2_ioctl+0x10/0x10 [ 75.421369][ T5326] __se_sys_ioctl+0xf5/0x170 [ 75.423162][ T5326] do_syscall_64+0xf3/0x230 [ 75.424848][ T5326] ? clear_bhb_loop+0x35/0x90 [ 75.426614][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.429057][ T5326] RIP: 0033:0x7f76e3f7e759 [ 75.430775][ T5326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.438207][ T5326] RSP: 002b:00007f76e4e1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.441306][ T5326] RAX: ffffffffffffffda RBX: 00007f76e4136058 RCX: 00007f76e3f7e759 [ 75.444180][ T5326] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 75.447275][ T5326] RBP: 00007f76e3ff175e R08: 0000000000000000 R09: 0000000000000000 [ 75.450221][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.453085][ T5326] R13: 0000000000000000 R14: 00007f76e4136058 R15: 00007ffcf8b52fd8 [ 75.456148][ T5326] [ 75.457393][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.460204][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 [ 75.463960][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.468059][ T5326] Call Trace: [ 75.469360][ T5326] [ 75.470511][ T5326] dump_stack_lvl+0x241/0x360 [ 75.472280][ T5326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.474185][ T5326] ? __pfx__printk+0x10/0x10 [ 75.475965][ T5326] ? _printk+0xd5/0x120 [ 75.477508][ T5326] ? __init_begin+0x41000/0x41000 [ 75.479409][ T5326] ? vscnprintf+0x5d/0x90 [ 75.481064][ T5326] panic+0x349/0x880 [ 75.482512][ T5326] ? __warn+0x177/0x4e0 [ 75.483996][ T5326] ? __pfx_panic+0x10/0x10 [ 75.485682][ T5326] ? show_trace_log_lvl+0x3b2/0x410 [ 75.487664][ T5326] __warn+0x34b/0x4e0 [ 75.489204][ T5326] ? __kvmalloc_node_noprof+0x17a/0x190 [ 75.491364][ T5326] report_bug+0x2b3/0x500 [ 75.493007][ T5326] ? __kvmalloc_node_noprof+0x17a/0x190 [ 75.495087][ T5326] handle_bug+0x60/0x90 [ 75.496692][ T5326] exc_invalid_op+0x1a/0x50 [ 75.498446][ T5326] asm_exc_invalid_op+0x1a/0x20 [ 75.500279][ T5326] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 75.502623][ T5326] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 df e0 b9 ff 41 81 e7 00 20 00 00 74 0a e8 91 dc b9 ff e9 3b ff ff ff e8 87 dc b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 75.509964][ T5326] RSP: 0018:ffffc9000d31f930 EFLAGS: 00010293 [ 75.512079][ T5326] RAX: ffffffff81db1489 RBX: 0000000088203400 RCX: ffff888000f9a440 [ 75.514976][ T5326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.517923][ T5326] RBP: 0000000000000000 R08: ffffffff81db1471 R09: 00000000ffffffff [ 75.520811][ T5326] R10: ffffc9000d31f7a0 R11: fffff52001a63ef9 R12: 0000000088203400 [ 75.523655][ T5326] R13: ffffc9000d31fa60 R14: 00000000ffffffff R15: 0000000000000000 [ 75.526401][ T5326] ? __kvmalloc_node_noprof+0x161/0x190 [ 75.528296][ T5326] ? __kvmalloc_node_noprof+0x179/0x190 [ 75.530236][ T5326] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 75.532126][ T5326] ? tpg_update_mv_step+0x361/0x4f0 [ 75.533973][ T5326] vivid_update_format_cap+0x133c/0x2090 [ 75.536097][ T5326] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 75.538396][ T5326] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 75.540553][ T5326] __video_do_ioctl+0xc23/0xdd0 [ 75.542341][ T5326] ? __pfx___video_do_ioctl+0x10/0x10 [ 75.544439][ T5326] ? __might_fault+0xc6/0x120 [ 75.546191][ T5326] video_usercopy+0x89b/0x1180 [ 75.548090][ T5326] ? __pfx___video_do_ioctl+0x10/0x10 [ 75.550188][ T5326] ? __pfx_video_usercopy+0x10/0x10 [ 75.552149][ T5326] ? __fget_files+0x2a/0x410 [ 75.553863][ T5326] ? __fget_files+0x2a/0x410 [ 75.555569][ T5326] v4l2_ioctl+0x189/0x1e0 [ 75.557157][ T5326] ? __pfx_v4l2_ioctl+0x10/0x10 [ 75.558940][ T5326] __se_sys_ioctl+0xf5/0x170 [ 75.560685][ T5326] do_syscall_64+0xf3/0x230 [ 75.562317][ T5326] ? clear_bhb_loop+0x35/0x90 [ 75.564055][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.566322][ T5326] RIP: 0033:0x7f76e3f7e759 [ 75.567989][ T5326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.575030][ T5326] RSP: 002b:00007f76e4e1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.578067][ T5326] RAX: ffffffffffffffda RBX: 00007f76e4136058 RCX: 00007f76e3f7e759 [ 75.581003][ T5326] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 75.583941][ T5326] RBP: 00007f76e3ff175e R08: 0000000000000000 R09: 0000000000000000 [ 75.586906][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.589924][ T5326] R13: 0000000000000000 R14: 00007f76e4136058 R15: 00007ffcf8b52fd8 [ 75.592894][ T5326] [ 75.594415][ T5326] Kernel Offset: disabled [ 75.596180][ T5326] Rebooting in 86400 seconds..