program:
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8e, 0x86f, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0xe40, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})
[ 72.528854][ T48] Bluetooth: hci0: command tx timeout
[ 72.623433][ T5325] ------------[ cut here ]------------
[ 72.626189][ T5325] WARNING: CPU: 0 PID: 5325 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190
[ 72.629824][ T5325] Modules linked in:
[ 72.631356][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[ 72.635077][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 72.639274][ T5325] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190
[ 72.641583][ T5325] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 ef e5 b9 ff 41 81 e7 00 20 00 00 74 0a e8 a1 e1 b9 ff e9 3b ff ff ff e8 97 e1 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00
[ 72.648803][ T5325] RSP: 0018:ffffc9000d2df930 EFLAGS: 00010287
[ 72.651056][ T5325] RAX: ffffffff81daf6f9 RBX: 0000000094df0000 RCX: 0000000000040000
[ 72.653976][ T5325] RDX: ffffc9000dc09000 RSI: 00000000000007b1 RDI: 00000000000007b2
[ 72.657107][ T5325] RBP: 0000000000000000 R08: ffffffff81daf6e1 R09: 00000000ffffffff
[ 72.660041][ T5325] R10: ffffc9000d2df7a0 R11: fffff52001a5bef9 R12: 0000000094df0000
[ 72.662997][ T5325] R13: ffffc9000d2dfa60 R14: 00000000ffffffff R15: 0000000000000000
[ 72.666151][ T5325] FS: 00007f4e2cbd66c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 72.669464][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 72.671898][ T5325] CR2: 00007f4e2bf22290 CR3: 0000000043212000 CR4: 0000000000352ef0
[ 72.675076][ T5325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 72.678257][ T5325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 72.681121][ T5325] Call Trace:
[ 72.682387][ T5325]
[ 72.683465][ T5325] ? __warn+0x168/0x4e0
[ 72.684946][ T5325] ? __kvmalloc_node_noprof+0x17a/0x190
[ 72.687237][ T5325] ? report_bug+0x2b3/0x500
[ 72.689033][ T5325] ? __kvmalloc_node_noprof+0x17a/0x190
[ 72.691458][ T5325] ? handle_bug+0x60/0x90
[ 72.693053][ T5325] ? exc_invalid_op+0x1a/0x50
[ 72.694837][ T5325] ? asm_exc_invalid_op+0x1a/0x20
[ 72.697281][ T5325] ? __kvmalloc_node_noprof+0x161/0x190
[ 72.699373][ T5325] ? __kvmalloc_node_noprof+0x179/0x190
[ 72.701442][ T5325] ? __kvmalloc_node_noprof+0x17a/0x190
[ 72.703516][ T5325] __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[ 72.706212][ T5325] ? tpg_update_mv_step+0x361/0x4f0
[ 72.708172][ T5325] vivid_update_format_cap+0x133c/0x2090
[ 72.710207][ T5325] ? __pfx_vivid_update_format_cap+0x10/0x10
[ 72.712627][ T5325] vivid_vid_cap_s_dv_timings+0x535/0x1230
[ 72.714790][ T5325] __video_do_ioctl+0xc23/0xdd0
[ 72.716854][ T5325] ? __pfx___video_do_ioctl+0x10/0x10
[ 72.718861][ T5325] ? __might_fault+0xc6/0x120
[ 72.720667][ T5325] video_usercopy+0x89b/0x1180
[ 72.722487][ T5325] ? __pfx___video_do_ioctl+0x10/0x10
[ 72.724534][ T5325] ? __pfx_video_usercopy+0x10/0x10
[ 72.726856][ T5325] ? __fget_files+0x29/0x470
[ 72.728611][ T5325] ? __fget_files+0x3f3/0x470
[ 72.730385][ T5325] v4l2_ioctl+0x189/0x1e0
[ 72.732009][ T5325] ? __pfx_v4l2_ioctl+0x10/0x10
[ 72.733804][ T5325] __se_sys_ioctl+0xf9/0x170
[ 72.736215][ T5325] do_syscall_64+0xf3/0x230
[ 72.738041][ T5325] ? clear_bhb_loop+0x35/0x90
[ 72.739861][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.742103][ T5325] RIP: 0033:0x7f4e2bd7e719
[ 72.743813][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 72.750958][ T5325] RSP: 002b:00007f4e2cbd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 72.754342][ T5325] RAX: ffffffffffffffda RBX: 00007f4e2bf35f80 RCX: 00007f4e2bd7e719
[ 72.757647][ T5325] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003
[ 72.760790][ T5325] RBP: 00007f4e2bdf132e R08: 0000000000000000 R09: 0000000000000000
[ 72.763611][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 72.766556][ T5325] R13: 0000000000000000 R14: 00007f4e2bf35f80 R15: 00007ffdaef83d88
[ 72.769368][ T5325]
[ 72.770433][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 72.773217][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[ 72.777716][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 72.781780][ T5325] Call Trace:
[ 72.783121][ T5325]
[ 72.784266][ T5325] dump_stack_lvl+0x241/0x360
[ 72.785905][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10
[ 72.787741][ T5325] ? __pfx__printk+0x10/0x10
[ 72.789427][ T5325] ? _printk+0xd5/0x120
[ 72.791029][ T5325] ? __init_begin+0x41000/0x41000
[ 72.792828][ T5325] ? vscnprintf+0x5d/0x90
[ 72.794491][ T5325] panic+0x349/0x880
[ 72.795955][ T5325] ? __warn+0x177/0x4e0
[ 72.797508][ T5325] ? __pfx_panic+0x10/0x10
[ 72.799203][ T5325] ? show_trace_log_lvl+0x3b2/0x410
[ 72.801204][ T5325] __warn+0x34b/0x4e0
[ 72.802736][ T5325] ? __kvmalloc_node_noprof+0x17a/0x190
[ 72.804694][ T5325] report_bug+0x2b3/0x500
[ 72.806319][ T5325] ? __kvmalloc_node_noprof+0x17a/0x190
[ 72.808409][ T5325] handle_bug+0x60/0x90
[ 72.810009][ T5325] exc_invalid_op+0x1a/0x50
[ 72.811769][ T5325] asm_exc_invalid_op+0x1a/0x20
[ 72.813655][ T5325] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190
[ 72.816018][ T5325] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 ef e5 b9 ff 41 81 e7 00 20 00 00 74 0a e8 a1 e1 b9 ff e9 3b ff ff ff e8 97 e1 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00
[ 72.823289][ T5325] RSP: 0018:ffffc9000d2df930 EFLAGS: 00010287
[ 72.825618][ T5325] RAX: ffffffff81daf6f9 RBX: 0000000094df0000 RCX: 0000000000040000
[ 72.828437][ T5325] RDX: ffffc9000dc09000 RSI: 00000000000007b1 RDI: 00000000000007b2
[ 72.831220][ T5325] RBP: 0000000000000000 R08: ffffffff81daf6e1 R09: 00000000ffffffff
[ 72.834006][ T5325] R10: ffffc9000d2df7a0 R11: fffff52001a5bef9 R12: 0000000094df0000
[ 72.836768][ T5325] R13: ffffc9000d2dfa60 R14: 00000000ffffffff R15: 0000000000000000
[ 72.839573][ T5325] ? __kvmalloc_node_noprof+0x161/0x190
[ 72.841571][ T5325] ? __kvmalloc_node_noprof+0x179/0x190
[ 72.843692][ T5325] __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[ 72.845987][ T5325] ? tpg_update_mv_step+0x361/0x4f0
[ 72.848056][ T5325] vivid_update_format_cap+0x133c/0x2090
[ 72.850253][ T5325] ? __pfx_vivid_update_format_cap+0x10/0x10
[ 72.852617][ T5325] vivid_vid_cap_s_dv_timings+0x535/0x1230
[ 72.854831][ T5325] __video_do_ioctl+0xc23/0xdd0
[ 72.856776][ T5325] ? __pfx___video_do_ioctl+0x10/0x10
[ 72.858869][ T5325] ? __might_fault+0xc6/0x120
[ 72.860672][ T5325] video_usercopy+0x89b/0x1180
[ 72.862465][ T5325] ? __pfx___video_do_ioctl+0x10/0x10
[ 72.864530][ T5325] ? __pfx_video_usercopy+0x10/0x10
[ 72.866514][ T5325] ? __fget_files+0x29/0x470
[ 72.868264][ T5325] ? __fget_files+0x3f3/0x470
[ 72.870014][ T5325] v4l2_ioctl+0x189/0x1e0
[ 72.871586][ T5325] ? __pfx_v4l2_ioctl+0x10/0x10
[ 72.873384][ T5325] __se_sys_ioctl+0xf9/0x170
[ 72.875148][ T5325] do_syscall_64+0xf3/0x230
[ 72.876722][ T5325] ? clear_bhb_loop+0x35/0x90
[ 72.878420][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.880548][ T5325] RIP: 0033:0x7f4e2bd7e719
[ 72.882142][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 72.888563][ T5325] RSP: 002b:00007f4e2cbd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 72.891368][ T5325] RAX: ffffffffffffffda RBX: 00007f4e2bf35f80 RCX: 00007f4e2bd7e719
[ 72.894047][ T5325] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003
[ 72.896799][ T5325] RBP: 00007f4e2bdf132e R08: 0000000000000000 R09: 0000000000000000
[ 72.899687][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 72.902462][ T5325] R13: 0000000000000000 R14: 00007f4e2bf35f80 R15: 00007ffdaef83d88
[ 72.905332][ T5325]
[ 72.906714][ T5325] Kernel Offset: disabled
[ 72.908298][ T5325] Rebooting in 86400 seconds..