program: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x4, 0x19ef, 0x3, 0x5, 0x27fd, 0x2800, 0x1000, 0x3, 0xd, 0x3, {0x8, 0xffffffff}, 0xcd, 0x7}}) [ 73.517371][ T5092] Bluetooth: hci0: command tx timeout [ 73.634067][ T5106] ------------[ cut here ]------------ [ 73.637327][ T5106] WARNING: CPU: 0 PID: 5106 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190 [ 73.640387][ T5106] Modules linked in: [ 73.641923][ T5106] CPU: 0 UID: 0 PID: 5106 Comm: syz.0.0 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 73.645464][ T5106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.650075][ T5106] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 73.652637][ T5106] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 3f ed b9 ff 41 81 e7 00 20 00 00 74 0a e8 f1 e8 b9 ff e9 3b ff ff ff e8 e7 e8 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 73.660472][ T5106] RSP: 0018:ffffc9000b02f930 EFLAGS: 00010283 [ 73.662976][ T5106] RAX: ffffffff81daff19 RBX: 0000000097432000 RCX: 0000000000040000 [ 73.665960][ T5106] RDX: ffffc9000b83a000 RSI: 000000000000088b RDI: 000000000000088c [ 73.669594][ T5106] RBP: 0000000000000000 R08: ffffffff81daff01 R09: 00000000ffffffff [ 73.673336][ T5106] R10: ffffc9000b02f7a0 R11: fffff52001605ef9 R12: 0000000097432000 [ 73.676288][ T5106] R13: ffffc9000b02fa60 R14: 00000000ffffffff R15: 0000000000000000 [ 73.679849][ T5106] FS: 00007f0ade5bb6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 73.683549][ T5106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.686156][ T5106] CR2: 00007f0add925c78 CR3: 000000003578a000 CR4: 0000000000352ef0 [ 73.689345][ T5106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.695923][ T5106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.699117][ T5106] Call Trace: [ 73.700488][ T5106] [ 73.701760][ T5106] ? __warn+0x168/0x4e0 [ 73.703427][ T5106] ? __kvmalloc_node_noprof+0x17a/0x190 [ 73.705676][ T5106] ? report_bug+0x2b3/0x500 [ 73.708754][ T5106] ? __kvmalloc_node_noprof+0x17a/0x190 [ 73.711360][ T5106] ? handle_bug+0x60/0x90 [ 73.713369][ T5106] ? exc_invalid_op+0x1a/0x50 [ 73.715331][ T5106] ? asm_exc_invalid_op+0x1a/0x20 [ 73.717782][ T5106] ? __kvmalloc_node_noprof+0x161/0x190 [ 73.720353][ T5106] ? __kvmalloc_node_noprof+0x179/0x190 [ 73.722604][ T5106] ? __kvmalloc_node_noprof+0x17a/0x190 [ 73.724804][ T5106] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 73.727223][ T5106] ? tpg_update_mv_step+0x361/0x4f0 [ 73.729255][ T5106] vivid_update_format_cap+0x133c/0x2090 [ 73.731647][ T5106] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 73.734260][ T5106] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 73.736881][ T5106] __video_do_ioctl+0xc23/0xdd0 [ 73.739022][ T5106] ? __pfx___video_do_ioctl+0x10/0x10 [ 73.741229][ T5106] ? __might_fault+0xc6/0x120 [ 73.743323][ T5106] video_usercopy+0x89b/0x1180 [ 73.745539][ T5106] ? __pfx___video_do_ioctl+0x10/0x10 [ 73.748020][ T5106] ? __pfx_video_usercopy+0x10/0x10 [ 73.749841][ T5106] ? __fget_files+0x29/0x470 [ 73.751535][ T5106] ? __fget_files+0x3f3/0x470 [ 73.753385][ T5106] v4l2_ioctl+0x189/0x1e0 [ 73.755237][ T5106] ? __pfx_v4l2_ioctl+0x10/0x10 [ 73.757530][ T5106] __se_sys_ioctl+0xf9/0x170 [ 73.759371][ T5106] do_syscall_64+0xf3/0x230 [ 73.761095][ T5106] ? clear_bhb_loop+0x35/0x90 [ 73.762984][ T5106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.765308][ T5106] RIP: 0033:0x7f0add77dff9 [ 73.767495][ T5106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.775323][ T5106] RSP: 002b:00007f0ade5bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.778780][ T5106] RAX: ffffffffffffffda RBX: 00007f0add935f80 RCX: 00007f0add77dff9 [ 73.782299][ T5106] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 73.785759][ T5106] RBP: 00007f0add7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 73.788962][ T5106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.792175][ T5106] R13: 0000000000000000 R14: 00007f0add935f80 R15: 00007ffe281ac8c8 [ 73.795510][ T5106] [ 73.797112][ T5106] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.799973][ T5106] CPU: 0 UID: 0 PID: 5106 Comm: syz.0.0 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 73.804021][ T5106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.809015][ T5106] Call Trace: [ 73.810441][ T5106] [ 73.811636][ T5106] dump_stack_lvl+0x241/0x360 [ 73.813362][ T5106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.815382][ T5106] ? __pfx__printk+0x10/0x10 [ 73.817081][ T5106] ? _printk+0xd5/0x120 [ 73.818678][ T5106] ? __init_begin+0x41000/0x41000 [ 73.820721][ T5106] ? vscnprintf+0x5d/0x90 [ 73.822738][ T5106] panic+0x349/0x880 [ 73.824644][ T5106] ? __warn+0x177/0x4e0 [ 73.826369][ T5106] ? __pfx_panic+0x10/0x10 [ 73.828037][ T5106] ? show_trace_log_lvl+0x3b2/0x410 [ 73.829962][ T5106] __warn+0x34b/0x4e0 [ 73.831523][ T5106] ? __kvmalloc_node_noprof+0x17a/0x190 [ 73.834101][ T5106] report_bug+0x2b3/0x500 [ 73.836181][ T5106] ? __kvmalloc_node_noprof+0x17a/0x190 [ 73.838642][ T5106] handle_bug+0x60/0x90 [ 73.840237][ T5106] exc_invalid_op+0x1a/0x50 [ 73.841889][ T5106] asm_exc_invalid_op+0x1a/0x20 [ 73.843824][ T5106] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 73.846016][ T5106] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 3f ed b9 ff 41 81 e7 00 20 00 00 74 0a e8 f1 e8 b9 ff e9 3b ff ff ff e8 e7 e8 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 73.855075][ T5106] RSP: 0018:ffffc9000b02f930 EFLAGS: 00010283 [ 73.857463][ T5106] RAX: ffffffff81daff19 RBX: 0000000097432000 RCX: 0000000000040000 [ 73.860818][ T5106] RDX: ffffc9000b83a000 RSI: 000000000000088b RDI: 000000000000088c [ 73.864346][ T5106] RBP: 0000000000000000 R08: ffffffff81daff01 R09: 00000000ffffffff [ 73.867916][ T5106] R10: ffffc9000b02f7a0 R11: fffff52001605ef9 R12: 0000000097432000 [ 73.871292][ T5106] R13: ffffc9000b02fa60 R14: 00000000ffffffff R15: 0000000000000000 [ 73.874508][ T5106] ? __kvmalloc_node_noprof+0x161/0x190 [ 73.877087][ T5106] ? __kvmalloc_node_noprof+0x179/0x190 [ 73.879990][ T5106] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 73.882783][ T5106] ? tpg_update_mv_step+0x361/0x4f0 [ 73.885196][ T5106] vivid_update_format_cap+0x133c/0x2090 [ 73.887801][ T5106] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 73.890462][ T5106] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 73.893229][ T5106] __video_do_ioctl+0xc23/0xdd0 [ 73.895429][ T5106] ? __pfx___video_do_ioctl+0x10/0x10 [ 73.897712][ T5106] ? __might_fault+0xc6/0x120 [ 73.899479][ T5106] video_usercopy+0x89b/0x1180 [ 73.901314][ T5106] ? __pfx___video_do_ioctl+0x10/0x10 [ 73.903306][ T5106] ? __pfx_video_usercopy+0x10/0x10 [ 73.905429][ T5106] ? __fget_files+0x29/0x470 [ 73.907800][ T5106] ? __fget_files+0x3f3/0x470 [ 73.909786][ T5106] v4l2_ioctl+0x189/0x1e0 [ 73.911388][ T5106] ? __pfx_v4l2_ioctl+0x10/0x10 [ 73.913349][ T5106] __se_sys_ioctl+0xf9/0x170 [ 73.915260][ T5106] do_syscall_64+0xf3/0x230 [ 73.917402][ T5106] ? clear_bhb_loop+0x35/0x90 [ 73.919852][ T5106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.922847][ T5106] RIP: 0033:0x7f0add77dff9 [ 73.924775][ T5106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.932029][ T5106] RSP: 002b:00007f0ade5bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.935480][ T5106] RAX: ffffffffffffffda RBX: 00007f0add935f80 RCX: 00007f0add77dff9 [ 73.939273][ T5106] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 73.942475][ T5106] RBP: 00007f0add7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 73.945779][ T5106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.949230][ T5106] R13: 0000000000000000 R14: 00007f0add935f80 R15: 00007ffe281ac8c8 [ 73.953216][ T5106] [ 73.955079][ T5106] Kernel Offset: disabled [ 73.956888][ T5106] Rebooting in 86400 seconds..