program: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x4, 0x19ef, 0x2800, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x3, {0x8, 0xffffffff}, 0xcd, 0x7}}) [ 78.403020][ T48] Bluetooth: hci0: command tx timeout [ 78.406803][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.409548][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.577715][ T5108] ------------[ cut here ]------------ [ 78.580014][ T5108] WARNING: CPU: 0 PID: 5108 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190 [ 78.583552][ T5108] Modules linked in: [ 78.585235][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: syz.0.0 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 78.590049][ T5108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.594519][ T5108] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 78.596795][ T5108] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 3f ed b9 ff 41 81 e7 00 20 00 00 74 0a e8 f1 e8 b9 ff e9 3b ff ff ff e8 e7 e8 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 78.605284][ T5108] RSP: 0018:ffffc9000afff930 EFLAGS: 00010283 [ 78.608122][ T5108] RAX: ffffffff81daff19 RBX: 00000000f4341c00 RCX: 0000000000040000 [ 78.611124][ T5108] RDX: ffffc9000b5b9000 RSI: 000000000000088b RDI: 000000000000088c [ 78.614218][ T5108] RBP: 0000000000000000 R08: ffffffff81daff01 R09: 00000000ffffffff [ 78.617908][ T5108] R10: ffffc9000afff7a0 R11: fffff520015ffef9 R12: 00000000f4341c00 [ 78.621567][ T5108] R13: ffffc9000afffa60 R14: 00000000ffffffff R15: 0000000000000000 [ 78.624601][ T5108] FS: 00007f23e00626c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 78.628235][ T5108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.631425][ T5108] CR2: 00007f23df325c78 CR3: 000000003f978000 CR4: 0000000000352ef0 [ 78.635255][ T5108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.638621][ T5108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.641734][ T5108] Call Trace: [ 78.643037][ T5108] [ 78.644295][ T5108] ? __warn+0x168/0x4e0 [ 78.646771][ T5108] ? __kvmalloc_node_noprof+0x17a/0x190 [ 78.649868][ T5108] ? report_bug+0x2b3/0x500 [ 78.652000][ T5108] ? __kvmalloc_node_noprof+0x17a/0x190 [ 78.654269][ T5108] ? handle_bug+0x60/0x90 [ 78.656005][ T5108] ? exc_invalid_op+0x1a/0x50 [ 78.658040][ T5108] ? asm_exc_invalid_op+0x1a/0x20 [ 78.660104][ T5108] ? __kvmalloc_node_noprof+0x161/0x190 [ 78.662422][ T5108] ? __kvmalloc_node_noprof+0x179/0x190 [ 78.664621][ T5108] ? __kvmalloc_node_noprof+0x17a/0x190 [ 78.666892][ T5108] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 78.669612][ T5108] ? tpg_update_mv_step+0x361/0x4f0 [ 78.672204][ T5108] vivid_update_format_cap+0x133c/0x2090 [ 78.674517][ T5108] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 78.676912][ T5108] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 78.679328][ T5108] __video_do_ioctl+0xc23/0xdd0 [ 78.681265][ T5108] ? __pfx___video_do_ioctl+0x10/0x10 [ 78.683413][ T5108] ? __might_fault+0xc6/0x120 [ 78.685757][ T5108] video_usercopy+0x89b/0x1180 [ 78.688401][ T5108] ? __pfx___video_do_ioctl+0x10/0x10 [ 78.690883][ T5108] ? __pfx_video_usercopy+0x10/0x10 [ 78.692982][ T5108] ? __fget_files+0x29/0x470 [ 78.694743][ T5108] ? __fget_files+0x3f3/0x470 [ 78.696584][ T5108] v4l2_ioctl+0x189/0x1e0 [ 78.698393][ T5108] ? __pfx_v4l2_ioctl+0x10/0x10 [ 78.700449][ T5108] __se_sys_ioctl+0xf9/0x170 [ 78.702558][ T5108] do_syscall_64+0xf3/0x230 [ 78.705054][ T5108] ? clear_bhb_loop+0x35/0x90 [ 78.707213][ T5108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.709778][ T5108] RIP: 0033:0x7f23df17dff9 [ 78.711594][ T5108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.719691][ T5108] RSP: 002b:00007f23e0062038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.723131][ T5108] RAX: ffffffffffffffda RBX: 00007f23df335f80 RCX: 00007f23df17dff9 [ 78.726266][ T5108] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 78.729529][ T5108] RBP: 00007f23df1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 78.733732][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.738376][ T5108] R13: 0000000000000000 R14: 00007f23df335f80 R15: 00007fff30701a18 [ 78.741369][ T5108] [ 78.742600][ T5108] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.745371][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: syz.0.0 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 78.749238][ T5108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.753536][ T5108] Call Trace: [ 78.754960][ T5108] [ 78.756243][ T5108] dump_stack_lvl+0x241/0x360 [ 78.758341][ T5108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.760825][ T5108] ? __pfx__printk+0x10/0x10 [ 78.762645][ T5108] ? _printk+0xd5/0x120 [ 78.764237][ T5108] ? __init_begin+0x41000/0x41000 [ 78.766081][ T5108] ? vscnprintf+0x5d/0x90 [ 78.767847][ T5108] panic+0x349/0x880 [ 78.769344][ T5108] ? __warn+0x177/0x4e0 [ 78.770897][ T5108] ? __pfx_panic+0x10/0x10 [ 78.772616][ T5108] ? show_trace_log_lvl+0x3b2/0x410 [ 78.774908][ T5108] __warn+0x34b/0x4e0 [ 78.777186][ T5108] ? __kvmalloc_node_noprof+0x17a/0x190 [ 78.780075][ T5108] report_bug+0x2b3/0x500 [ 78.781893][ T5108] ? __kvmalloc_node_noprof+0x17a/0x190 [ 78.783941][ T5108] handle_bug+0x60/0x90 [ 78.785510][ T5108] exc_invalid_op+0x1a/0x50 [ 78.787331][ T5108] asm_exc_invalid_op+0x1a/0x20 [ 78.789341][ T5108] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 78.791791][ T5108] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 3f ed b9 ff 41 81 e7 00 20 00 00 74 0a e8 f1 e8 b9 ff e9 3b ff ff ff e8 e7 e8 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 78.800032][ T5108] RSP: 0018:ffffc9000afff930 EFLAGS: 00010283 [ 78.802570][ T5108] RAX: ffffffff81daff19 RBX: 00000000f4341c00 RCX: 0000000000040000 [ 78.805960][ T5108] RDX: ffffc9000b5b9000 RSI: 000000000000088b RDI: 000000000000088c [ 78.809151][ T5108] RBP: 0000000000000000 R08: ffffffff81daff01 R09: 00000000ffffffff [ 78.812686][ T5108] R10: ffffc9000afff7a0 R11: fffff520015ffef9 R12: 00000000f4341c00 [ 78.816433][ T5108] R13: ffffc9000afffa60 R14: 00000000ffffffff R15: 0000000000000000 [ 78.819786][ T5108] ? __kvmalloc_node_noprof+0x161/0x190 [ 78.822017][ T5108] ? __kvmalloc_node_noprof+0x179/0x190 [ 78.824227][ T5108] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 78.826955][ T5108] ? tpg_update_mv_step+0x361/0x4f0 [ 78.829535][ T5108] vivid_update_format_cap+0x133c/0x2090 [ 78.831915][ T5108] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 78.834323][ T5108] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 78.836765][ T5108] __video_do_ioctl+0xc23/0xdd0 [ 78.838802][ T5108] ? __pfx___video_do_ioctl+0x10/0x10 [ 78.840623][ T5108] ? __might_fault+0xc6/0x120 [ 78.842255][ T5108] video_usercopy+0x89b/0x1180 [ 78.844090][ T5108] ? __pfx___video_do_ioctl+0x10/0x10 [ 78.846381][ T5108] ? __pfx_video_usercopy+0x10/0x10 [ 78.848718][ T5108] ? __fget_files+0x29/0x470 [ 78.850838][ T5108] ? __fget_files+0x3f3/0x470 [ 78.852684][ T5108] v4l2_ioctl+0x189/0x1e0 [ 78.854449][ T5108] ? __pfx_v4l2_ioctl+0x10/0x10 [ 78.856298][ T5108] __se_sys_ioctl+0xf9/0x170 [ 78.858268][ T5108] do_syscall_64+0xf3/0x230 [ 78.860373][ T5108] ? clear_bhb_loop+0x35/0x90 [ 78.862680][ T5108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.865848][ T5108] RIP: 0033:0x7f23df17dff9 [ 78.867783][ T5108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.875777][ T5108] RSP: 002b:00007f23e0062038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.879899][ T5108] RAX: ffffffffffffffda RBX: 00007f23df335f80 RCX: 00007f23df17dff9 [ 78.883368][ T5108] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 78.886321][ T5108] RBP: 00007f23df1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 78.889317][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.892565][ T5108] R13: 0000000000000000 R14: 00007f23df335f80 R15: 00007fff30701a18 [ 78.896086][ T5108] [ 78.897765][ T5108] Kernel Offset: disabled [ 78.899573][ T5108] Rebooting in 86400 seconds..