program: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x2800, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x18, {0x8, 0xffffffff}, 0xd0, 0x9}}) [ 89.743797][ T4539] Bluetooth: hci0: command tx timeout [ 90.989064][ T5126] ------------[ cut here ]------------ [ 90.991560][ T5126] WARNING: CPU: 0 PID: 5126 at mm/util.c:665 __kvmalloc_node_noprof+0x17a/0x190 [ 90.995439][ T5126] Modules linked in: [ 90.996877][ T5126] CPU: 0 UID: 0 PID: 5126 Comm: syz.0.0 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 91.000531][ T5126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.004646][ T5126] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 91.007231][ T5126] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 bf 23 bb ff 41 81 e7 00 20 00 00 74 0a e8 71 1f bb ff e9 3b ff ff ff e8 67 1f bb ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 91.015336][ T5126] RSP: 0018:ffffc90002e1f930 EFLAGS: 00010283 [ 91.017721][ T5126] RAX: ffffffff81d86cc9 RBX: 00000000da6b5000 RCX: 0000000000040000 [ 91.020737][ T5126] RDX: ffffc90003252000 RSI: 0000000000000c88 RDI: 0000000000000c89 [ 91.023921][ T5126] RBP: 0000000000000000 R08: ffffffff81d86cb1 R09: 00000000ffffffff [ 91.027004][ T5126] R10: ffffc90002e1f7a0 R11: fffff520005c3ef9 R12: 00000000da6b5000 [ 91.030098][ T5126] R13: ffffc90002e1fa60 R14: 00000000ffffffff R15: 0000000000000000 [ 91.033196][ T5126] FS: 00007fe1f8a736c0(0000) GS:ffff88801fe00000(0000) knlGS:0000000000000000 [ 91.036626][ T5126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.039423][ T5126] CR2: 00007fe1f7f0ae68 CR3: 00000000331a4000 CR4: 0000000000350ef0 [ 91.042880][ T5126] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.046484][ T5126] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.049846][ T5126] Call Trace: [ 91.051136][ T5126] [ 91.052243][ T5126] ? __warn+0x163/0x4e0 [ 91.054227][ T5126] ? __kvmalloc_node_noprof+0x17a/0x190 [ 91.056436][ T5126] ? report_bug+0x2b3/0x500 [ 91.058499][ T5126] ? __kvmalloc_node_noprof+0x17a/0x190 [ 91.061463][ T5126] ? handle_bug+0x3e/0x70 [ 91.063731][ T5126] ? exc_invalid_op+0x1a/0x50 [ 91.065586][ T5126] ? asm_exc_invalid_op+0x1a/0x20 [ 91.067524][ T5126] ? __kvmalloc_node_noprof+0x161/0x190 [ 91.069741][ T5126] ? __kvmalloc_node_noprof+0x179/0x190 [ 91.072066][ T5126] ? __kvmalloc_node_noprof+0x17a/0x190 [ 91.074736][ T5126] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 91.077258][ T5126] ? tpg_update_mv_step+0x361/0x4f0 [ 91.079362][ T5126] vivid_update_format_cap+0x133c/0x2090 [ 91.081465][ T5126] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 91.083756][ T5126] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 91.086033][ T5126] __video_do_ioctl+0xc26/0xde0 [ 91.088395][ T5126] ? __pfx___video_do_ioctl+0x10/0x10 [ 91.091071][ T5126] ? __might_fault+0xc6/0x120 [ 91.093737][ T5126] video_usercopy+0x89b/0x1180 [ 91.095489][ T5126] ? __pfx___video_do_ioctl+0x10/0x10 [ 91.097350][ T5126] ? __pfx_video_usercopy+0x10/0x10 [ 91.099182][ T5126] ? __fget_files+0x29/0x470 [ 91.100812][ T5126] ? __fget_files+0x3f6/0x470 [ 91.102599][ T5126] ? __fget_files+0x29/0x470 [ 91.104505][ T5126] v4l2_ioctl+0x18c/0x1e0 [ 91.106243][ T5126] ? __pfx_v4l2_ioctl+0x10/0x10 [ 91.108357][ T5126] __se_sys_ioctl+0xfc/0x170 [ 91.110398][ T5126] do_syscall_64+0xf3/0x230 [ 91.112413][ T5126] ? clear_bhb_loop+0x35/0x90 [ 91.114587][ T5126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.116849][ T5126] RIP: 0033:0x7fe1f7d79eb9 [ 91.118553][ T5126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.125751][ T5126] RSP: 002b:00007fe1f8a73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.129042][ T5126] RAX: ffffffffffffffda RBX: 00007fe1f7f15f80 RCX: 00007fe1f7d79eb9 [ 91.132914][ T5126] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 91.136831][ T5126] RBP: 00007fe1f7de793e R08: 0000000000000000 R09: 0000000000000000 [ 91.139803][ T5126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.142855][ T5126] R13: 0000000000000000 R14: 00007fe1f7f15f80 R15: 00007ffcf887e7c8 [ 91.146788][ T5126] [ 91.148263][ T5126] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.151609][ T5126] CPU: 0 UID: 0 PID: 5126 Comm: syz.0.0 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 91.155678][ T5126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.159927][ T5126] Call Trace: [ 91.161275][ T5126] [ 91.162657][ T5126] dump_stack_lvl+0x241/0x360 [ 91.164895][ T5126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.167287][ T5126] ? __pfx__printk+0x10/0x10 [ 91.169339][ T5126] ? _printk+0xd5/0x120 [ 91.171221][ T5126] ? vscnprintf+0x5d/0x90 [ 91.173299][ T5126] panic+0x349/0x860 [ 91.175290][ T5126] ? __warn+0x172/0x4e0 [ 91.177427][ T5126] ? __pfx_panic+0x10/0x10 [ 91.179815][ T5126] ? show_trace_log_lvl+0x4e6/0x520 [ 91.182116][ T5126] __warn+0x346/0x4e0 [ 91.183465][ T5126] ? __kvmalloc_node_noprof+0x17a/0x190 [ 91.185234][ T5126] report_bug+0x2b3/0x500 [ 91.186766][ T5126] ? __kvmalloc_node_noprof+0x17a/0x190 [ 91.188747][ T5126] handle_bug+0x3e/0x70 [ 91.190372][ T5126] exc_invalid_op+0x1a/0x50 [ 91.192217][ T5126] asm_exc_invalid_op+0x1a/0x20 [ 91.194106][ T5126] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 91.196316][ T5126] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 bf 23 bb ff 41 81 e7 00 20 00 00 74 0a e8 71 1f bb ff e9 3b ff ff ff e8 67 1f bb ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 91.203641][ T5126] RSP: 0018:ffffc90002e1f930 EFLAGS: 00010283 [ 91.206511][ T5126] RAX: ffffffff81d86cc9 RBX: 00000000da6b5000 RCX: 0000000000040000 [ 91.209732][ T5126] RDX: ffffc90003252000 RSI: 0000000000000c88 RDI: 0000000000000c89 [ 91.212638][ T5126] RBP: 0000000000000000 R08: ffffffff81d86cb1 R09: 00000000ffffffff [ 91.215715][ T5126] R10: ffffc90002e1f7a0 R11: fffff520005c3ef9 R12: 00000000da6b5000 [ 91.218740][ T5126] R13: ffffc90002e1fa60 R14: 00000000ffffffff R15: 0000000000000000 [ 91.221664][ T5126] ? __kvmalloc_node_noprof+0x161/0x190 [ 91.223493][ T5126] ? __kvmalloc_node_noprof+0x179/0x190 [ 91.225377][ T5126] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 91.227506][ T5126] ? tpg_update_mv_step+0x361/0x4f0 [ 91.229291][ T5126] vivid_update_format_cap+0x133c/0x2090 [ 91.231781][ T5126] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 91.234930][ T5126] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 91.237573][ T5126] __video_do_ioctl+0xc26/0xde0 [ 91.239410][ T5126] ? __pfx___video_do_ioctl+0x10/0x10 [ 91.241437][ T5126] ? __might_fault+0xc6/0x120 [ 91.243230][ T5126] video_usercopy+0x89b/0x1180 [ 91.245021][ T5126] ? __pfx___video_do_ioctl+0x10/0x10 [ 91.247095][ T5126] ? __pfx_video_usercopy+0x10/0x10 [ 91.249128][ T5126] ? __fget_files+0x29/0x470 [ 91.251089][ T5126] ? __fget_files+0x3f6/0x470 [ 91.253417][ T5126] ? __fget_files+0x29/0x470 [ 91.255732][ T5126] v4l2_ioctl+0x18c/0x1e0 [ 91.257705][ T5126] ? __pfx_v4l2_ioctl+0x10/0x10 [ 91.259576][ T5126] __se_sys_ioctl+0xfc/0x170 [ 91.261346][ T5126] do_syscall_64+0xf3/0x230 [ 91.262767][ T5126] ? clear_bhb_loop+0x35/0x90 [ 91.264279][ T5126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.266389][ T5126] RIP: 0033:0x7fe1f7d79eb9 [ 91.268203][ T5126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.276724][ T5126] RSP: 002b:00007fe1f8a73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.279854][ T5126] RAX: ffffffffffffffda RBX: 00007fe1f7f15f80 RCX: 00007fe1f7d79eb9 [ 91.282840][ T5126] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 91.285787][ T5126] RBP: 00007fe1f7de793e R08: 0000000000000000 R09: 0000000000000000 [ 91.289021][ T5126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.292518][ T5126] R13: 0000000000000000 R14: 00007fe1f7f15f80 R15: 00007ffcf887e7c8 [ 91.295914][ T5126] [ 91.297379][ T5126] Kernel Offset: disabled [ 91.299108][ T5126] Rebooting in 86400 seconds..