program: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x4, 0x3, 0x2800, 0x2800, 0x802, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0x3, 0x0, '\x00', {0x0, @bt={0x6, 0x2, 0x0, 0x5, 0x7, 0xc90, 0x8b, 0x80000001, 0x6, 0x5, 0x9, 0xffffffff, 0x7, 0x5ec, 0x2, 0x36, {0xdaf}, 0x8, 0x3c}}}) [ 59.575898][ T5321] ------------[ cut here ]------------ [ 59.578281][ T5321] WARNING: CPU: 0 PID: 5321 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190 [ 59.581525][ T5321] Modules linked in: [ 59.583125][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 [ 59.586756][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.590533][ T5321] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 59.592620][ T5321] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 df e5 b9 ff 41 81 e7 00 20 00 00 74 0a e8 91 e1 b9 ff e9 3b ff ff ff e8 87 e1 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 59.599185][ T5321] RSP: 0018:ffffc9000d197930 EFLAGS: 00010287 [ 59.601347][ T5321] RAX: ffffffff81daf639 RBX: 000000008379f600 RCX: 0000000000040000 [ 59.604047][ T5321] RDX: ffffc9000daaa000 RSI: 00000000000007ae RDI: 00000000000007af [ 59.607031][ T5321] RBP: 0000000000000000 R08: ffffffff81daf621 R09: 00000000ffffffff [ 59.610062][ T5321] R10: ffffc9000d1977a0 R11: fffff52001a32ef9 R12: 000000008379f600 [ 59.612977][ T5321] R13: ffffc9000d197a60 R14: 00000000ffffffff R15: 0000000000000000 [ 59.615776][ T5321] FS: 00007ff997db76c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 59.619246][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.621597][ T5321] CR2: 00007ff99710d538 CR3: 000000004fad0000 CR4: 0000000000352ef0 [ 59.624556][ T5321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.627564][ T5321] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.630559][ T5321] Call Trace: [ 59.631804][ T5321] [ 59.632950][ T5321] ? __warn+0x168/0x4e0 [ 59.634597][ T5321] ? __kvmalloc_node_noprof+0x17a/0x190 [ 59.636688][ T5321] ? report_bug+0x2b3/0x500 [ 59.638557][ T5321] ? __kvmalloc_node_noprof+0x17a/0x190 [ 59.640580][ T5321] ? handle_bug+0x60/0x90 [ 59.642482][ T5321] ? exc_invalid_op+0x1a/0x50 [ 59.644191][ T5321] ? asm_exc_invalid_op+0x1a/0x20 [ 59.645979][ T5321] ? __kvmalloc_node_noprof+0x161/0x190 [ 59.648780][ T5321] ? __kvmalloc_node_noprof+0x179/0x190 [ 59.650727][ T5321] ? __kvmalloc_node_noprof+0x17a/0x190 [ 59.652630][ T5321] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 59.654739][ T5321] ? tpg_update_mv_step+0x361/0x4f0 [ 59.656611][ T5321] vivid_update_format_cap+0x133c/0x2090 [ 59.658710][ T5321] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 59.660877][ T5321] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 59.663177][ T5321] __video_do_ioctl+0xc23/0xdd0 [ 59.665054][ T5321] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.667102][ T5321] ? __might_fault+0xc6/0x120 [ 59.668988][ T5321] video_usercopy+0x89b/0x1180 [ 59.670835][ T5321] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.672806][ T5321] ? __pfx_video_usercopy+0x10/0x10 [ 59.674777][ T5321] ? __fget_files+0x29/0x470 [ 59.676606][ T5321] ? __fget_files+0x3f3/0x470 [ 59.678578][ T5321] v4l2_ioctl+0x189/0x1e0 [ 59.680170][ T5321] ? __pfx_v4l2_ioctl+0x10/0x10 [ 59.681920][ T5321] __se_sys_ioctl+0xf9/0x170 [ 59.683552][ T5321] do_syscall_64+0xf3/0x230 [ 59.685205][ T5321] ? clear_bhb_loop+0x35/0x90 [ 59.686971][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.689258][ T5321] RIP: 0033:0x7ff996f7e719 [ 59.690962][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.698013][ T5321] RSP: 002b:00007ff997db7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.701040][ T5321] RAX: ffffffffffffffda RBX: 00007ff997135f80 RCX: 00007ff996f7e719 [ 59.703908][ T5321] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000004 [ 59.706919][ T5321] RBP: 00007ff996ff132e R08: 0000000000000000 R09: 0000000000000000 [ 59.709998][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.712810][ T5321] R13: 0000000000000000 R14: 00007ff997135f80 R15: 00007ffd52243cc8 [ 59.715893][ T5321] [ 59.717130][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 59.719942][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 [ 59.723716][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.727684][ T5321] Call Trace: [ 59.728944][ T5321] [ 59.730019][ T5321] dump_stack_lvl+0x241/0x360 [ 59.731822][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.733707][ T5321] ? __pfx__printk+0x10/0x10 [ 59.735449][ T5321] ? _printk+0xd5/0x120 [ 59.736923][ T5321] ? __init_begin+0x41000/0x41000 [ 59.738743][ T5321] ? vscnprintf+0x5d/0x90 [ 59.740345][ T5321] panic+0x349/0x880 [ 59.741842][ T5321] ? __warn+0x177/0x4e0 [ 59.743340][ T5321] ? __pfx_panic+0x10/0x10 [ 59.744999][ T5321] ? show_trace_log_lvl+0x3b2/0x410 [ 59.746921][ T5321] __warn+0x34b/0x4e0 [ 59.748430][ T5321] ? __kvmalloc_node_noprof+0x17a/0x190 [ 59.750518][ T5321] report_bug+0x2b3/0x500 [ 59.752204][ T5321] ? __kvmalloc_node_noprof+0x17a/0x190 [ 59.754378][ T5321] handle_bug+0x60/0x90 [ 59.755979][ T5321] exc_invalid_op+0x1a/0x50 [ 59.757512][ T5321] asm_exc_invalid_op+0x1a/0x20 [ 59.759005][ T5321] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 59.761033][ T5321] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 df e5 b9 ff 41 81 e7 00 20 00 00 74 0a e8 91 e1 b9 ff e9 3b ff ff ff e8 87 e1 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 59.767867][ T5321] RSP: 0018:ffffc9000d197930 EFLAGS: 00010287 [ 59.770183][ T5321] RAX: ffffffff81daf639 RBX: 000000008379f600 RCX: 0000000000040000 [ 59.772995][ T5321] RDX: ffffc9000daaa000 RSI: 00000000000007ae RDI: 00000000000007af [ 59.775908][ T5321] RBP: 0000000000000000 R08: ffffffff81daf621 R09: 00000000ffffffff [ 59.778711][ T5321] R10: ffffc9000d1977a0 R11: fffff52001a32ef9 R12: 000000008379f600 [ 59.781611][ T5321] R13: ffffc9000d197a60 R14: 00000000ffffffff R15: 0000000000000000 [ 59.784423][ T5321] ? __kvmalloc_node_noprof+0x161/0x190 [ 59.786427][ T5321] ? __kvmalloc_node_noprof+0x179/0x190 [ 59.788582][ T5321] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 59.790883][ T5321] ? tpg_update_mv_step+0x361/0x4f0 [ 59.792950][ T5321] vivid_update_format_cap+0x133c/0x2090 [ 59.795104][ T5321] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 59.797427][ T5321] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 59.799555][ T5321] __video_do_ioctl+0xc23/0xdd0 [ 59.801164][ T5321] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.803024][ T5321] ? __might_fault+0xc6/0x120 [ 59.804728][ T5321] video_usercopy+0x89b/0x1180 [ 59.806515][ T5321] ? __pfx___video_do_ioctl+0x10/0x10 [ 59.808562][ T5321] ? __pfx_video_usercopy+0x10/0x10 [ 59.810520][ T5321] ? __fget_files+0x29/0x470 [ 59.811937][ T5321] ? __fget_files+0x3f3/0x470 [ 59.813583][ T5321] v4l2_ioctl+0x189/0x1e0 [ 59.815274][ T5321] ? __pfx_v4l2_ioctl+0x10/0x10 [ 59.817031][ T5321] __se_sys_ioctl+0xf9/0x170 [ 59.818808][ T5321] do_syscall_64+0xf3/0x230 [ 59.820476][ T5321] ? clear_bhb_loop+0x35/0x90 [ 59.822156][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.824298][ T5321] RIP: 0033:0x7ff996f7e719 [ 59.825886][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.832643][ T5321] RSP: 002b:00007ff997db7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.835768][ T5321] RAX: ffffffffffffffda RBX: 00007ff997135f80 RCX: 00007ff996f7e719 [ 59.838672][ T5321] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000004 [ 59.841487][ T5321] RBP: 00007ff996ff132e R08: 0000000000000000 R09: 0000000000000000 [ 59.844360][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.847264][ T5321] R13: 0000000000000000 R14: 00007ff997135f80 R15: 00007ffd52243cc8 [ 59.850144][ T5321] [ 59.851587][ T5321] Kernel Offset: disabled [ 59.853284][ T5321] Rebooting in 86400 seconds..