program:
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb43, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x440, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb43, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x2800, 0x3, 0x2800, 0x2800, 0x440, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})
[ 65.556613][ T4531] Bluetooth: hci0: command tx timeout
[ 65.643289][ T5103] syz.0.0: vmalloc error: size 2038794240, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 65.649895][ T5103] CPU: 0 UID: 0 PID: 5103 Comm: syz.0.0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[ 65.653933][ T5103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 65.657907][ T5103] Call Trace:
[ 65.659180][ T5103]
[ 65.660280][ T5103] dump_stack_lvl+0x241/0x360
[ 65.662140][ T5103] ? __pfx_dump_stack_lvl+0x10/0x10
[ 65.664108][ T5103] ? __pfx__printk+0x10/0x10
[ 65.665835][ T5103] ? cpuset_print_current_mems_allowed+0x1f/0x350
[ 65.668181][ T5103] ? cpuset_print_current_mems_allowed+0x31e/0x350
[ 65.670634][ T5103] warn_alloc+0x278/0x410
[ 65.672283][ T5103] ? __vmalloc_node_range_noprof+0x106/0x13f0
[ 65.674546][ T5103] ? __pfx_warn_alloc+0x10/0x10
[ 65.676378][ T5103] ? __asan_memset+0x23/0x50
[ 65.678097][ T5103] __vmalloc_node_range_noprof+0x126/0x13f0
[ 65.680374][ T5103] ? __pfx___alloc_pages_noprof+0x10/0x10
[ 65.682635][ T5103] ? __mutex_trylock_common+0x183/0x2e0
[ 65.684788][ T5103] ? __pfx___might_resched+0x10/0x10
[ 65.686895][ T5103] ? __pfx___mutex_trylock_common+0x10/0x10
[ 65.689168][ T5103] ? __kasan_kmalloc_large+0x1a/0xa0
[ 65.691288][ T5103] ? rcu_is_watching+0x15/0xb0
[ 65.693116][ T5103] ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 65.695580][ T5103] ? rcu_is_watching+0x15/0xb0
[ 65.697446][ T5103] ? trace_kmalloc+0x1f/0xd0
[ 65.699279][ T5103] ? __kmalloc_node_noprof+0x247/0x440
[ 65.701364][ T5103] ? __kvmalloc_node_noprof+0x72/0x190
[ 65.703400][ T5103] __kvmalloc_node_noprof+0x142/0x190
[ 65.705664][ T5103] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[ 65.708128][ T5103] __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[ 65.710536][ T5103] ? tpg_update_mv_step+0x361/0x4f0
[ 65.712573][ T5103] vivid_update_format_cap+0x133c/0x2090
[ 65.714899][ T5103] ? __pfx_vivid_update_format_cap+0x10/0x10
[ 65.717231][ T5103] vivid_vid_cap_s_dv_timings+0x535/0x1230
[ 65.719409][ T5103] __video_do_ioctl+0xc23/0xdd0
[ 65.721240][ T5103] ? __pfx___video_do_ioctl+0x10/0x10
[ 65.723301][ T5103] ? __might_fault+0xc6/0x120
[ 65.725235][ T5103] video_usercopy+0x89b/0x1180
[ 65.727123][ T5103] ? __pfx___video_do_ioctl+0x10/0x10
[ 65.729101][ T5103] ? __pfx_video_usercopy+0x10/0x10
[ 65.730960][ T5103] ? __fget_files+0x29/0x470
[ 65.732711][ T5103] ? __fget_files+0x3f3/0x470
[ 65.734502][ T5103] v4l2_ioctl+0x189/0x1e0
[ 65.736085][ T5103] ? __pfx_v4l2_ioctl+0x10/0x10
[ 65.737894][ T5103] __se_sys_ioctl+0xf9/0x170
[ 65.739566][ T5103] do_syscall_64+0xf3/0x230
[ 65.741194][ T5103] ? clear_bhb_loop+0x35/0x90
[ 65.743117][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 65.745365][ T5103] RIP: 0033:0x7f1d7657dff9
[ 65.747044][ T5103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 65.753983][ T5103] RSP: 002b:00007f1d77382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 65.757145][ T5103] RAX: ffffffffffffffda RBX: 00007f1d76735f80 RCX: 00007f1d7657dff9
[ 65.760334][ T5103] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000004
[ 65.763228][ T5103] RBP: 00007f1d765f0296 R08: 0000000000000000 R09: 0000000000000000
[ 65.766194][ T5103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 65.769095][ T5103] R13: 0000000000000000 R14: 00007f1d76735f80 R15: 00007ffedebace88
[ 65.771974][ T5103]
[ 65.784747][ T5103] Mem-Info:
[ 65.786916][ T5103] active_anon:2722 inactive_anon:0 isolated_anon:0
[ 65.786916][ T5103] active_file:0 inactive_file:38076 isolated_file:0
[ 65.786916][ T5103] unevictable:1768 dirty:17 writeback:0
[ 65.786916][ T5103] slab_reclaimable:6696 slab_unreclaimable:31747
[ 65.786916][ T5103] mapped:5258 shmem:2221 pagetables:421
[ 65.786916][ T5103] sec_pagetables:293 bounce:0
[ 65.786916][ T5103] kernel_misc_reclaimable:0
[ 65.786916][ T5103] free:56784 free_pcp:912 free_cma:0
[ 65.804339][ T5103] Node 0 active_anon:1532kB inactive_anon:0kB active_file:0kB inactive_file:6500kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:3156kB dirty:24kB writeback:0kB shmem:1872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2960kB pagetables:508kB sec_pagetables:1120kB all_unreclaimable? yes
[ 65.817075][ T5103] Node 1 active_anon:9356kB inactive_anon:0kB active_file:0kB inactive_file:145804kB unevictable:5540kB isolated(anon):0kB isolated(file):0kB mapped:17876kB dirty:44kB writeback:0kB shmem:7012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5588kB pagetables:1176kB sec_pagetables:52kB all_unreclaimable? no
[ 65.828896][ T5103] Node 0 DMA free:2996kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:204kB inactive_anon:0kB active_file:0kB inactive_file:1660kB unevictable:368kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:368kB local_pcp:368kB free_cma:0kB
[ 65.840364][ T5103] lowmem_reserve[]: 0 86 0 0 0
[ 65.842303][ T5103] Node 0 DMA32 free:13692kB boost:8192kB min:12600kB low:13700kB high:14800kB reserved_highatomic:0KB active_anon:1328kB inactive_anon:0kB active_file:0kB inactive_file:4840kB unevictable:1164kB writepending:24kB present:770052kB managed:116620kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB
[ 65.853778][ T5103] lowmem_reserve[]: 0 0 0 0 0
[ 65.857026][ T5103] Node 1 DMA32 free:210448kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB active_anon:9356kB inactive_anon:0kB active_file:0kB inactive_file:145804kB unevictable:5540kB writepending:44kB present:786288kB managed:690876kB mlocked:0kB bounce:0kB free_pcp:3088kB local_pcp:3088kB free_cma:0kB
[ 65.868796][ T5103] lowmem_reserve[]: 0 0 0 0 0
[ 65.871136][ T5103] Node 0 DMA: 3*4kB (U) 31*8kB (U) 71*16kB (U) 50*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2996kB
[ 65.877503][ T5103] Node 0 DMA32: 157*4kB (UME) 99*8kB (UM) 35*16kB (UM) 102*32kB (UME) 56*64kB (UM) 28*128kB (UM) 3*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 13692kB
[ 65.883464][ T5103] Node 1 DMA32: 2*4kB (UM) 1*8kB (U) 0*16kB 1*32kB (M) 1*64kB (U) 1*128kB (M) 1*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 49*4096kB (M) = 210416kB
[ 65.891125][ T5103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 65.894638][ T5103] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 65.899180][ T5103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 65.902668][ T5103] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 65.906454][ T5103] 40298 total pagecache pages
[ 65.908295][ T5103] 0 pages in swap cache
[ 65.909925][ T5103] Free swap = 124996kB
[ 65.911506][ T5103] Total swap = 124996kB
[ 65.913155][ T5103] 393083 pages RAM
[ 65.914596][ T5103] 0 pages HighMem/MovableOnly
[ 65.917914][ T5103] 187369 pages reserved
[ 65.919538][ T5103] 0 pages cma reserved
[ 65.921179][ T5104] ------------[ cut here ]------------
[ 65.923080][ T5104] WARNING: CPU: 0 PID: 5104 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190
[ 65.926425][ T5104] Modules linked in:
[ 65.927942][ T5104] CPU: 0 UID: 0 PID: 5104 Comm: syz.0.0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[ 65.931587][ T5104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 65.936061][ T5104] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190
[ 65.938429][ T5104] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 bf dd b9 ff 41 81 e7 00 20 00 00 74 0a e8 71 d9 b9 ff e9 3b ff ff ff e8 67 d9 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00
[ 65.945306][ T5104] RSP: 0018:ffffc9000b327930 EFLAGS: 00010283
[ 65.947526][ T5104] RAX: ffffffff81dafe79 RBX: 00000000f7b0cc00 RCX: 0000000000040000
[ 65.950442][ T5104] RDX: ffffc9000b8c1000 RSI: 00000000000007c0 RDI: 00000000000007c1
[ 65.953266][ T5104] RBP: 0000000000000000 R08: ffffffff81dafe61 R09: 00000000ffffffff
[ 65.956193][ T5104] R10: ffffc9000b3277a0 R11: fffff52001664ef9 R12: 00000000f7b0cc00
[ 65.959058][ T5104] R13: ffffc9000b327a60 R14: 00000000ffffffff R15: 0000000000000000
[ 65.962088][ T5104] FS: 00007f1d773616c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 65.965422][ T5104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 65.967943][ T5104] CR2: 000055b6b9a9d038 CR3: 000000003685c000 CR4: 0000000000352ef0
[ 65.970839][ T5104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 65.973987][ T5104] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 65.977160][ T5104] Call Trace:
[ 65.978493][ T5104]
[ 65.979515][ T5104] ? __warn+0x168/0x4e0
[ 65.981104][ T5104] ? __kvmalloc_node_noprof+0x17a/0x190
[ 65.983093][ T5104] ? report_bug+0x2b3/0x500
[ 65.984972][ T5104] ? __kvmalloc_node_noprof+0x17a/0x190
[ 65.987044][ T5104] ? handle_bug+0x60/0x90
[ 65.988621][ T5104] ? exc_invalid_op+0x1a/0x50
[ 65.990361][ T5104] ? asm_exc_invalid_op+0x1a/0x20
[ 65.992276][ T5104] ? __kvmalloc_node_noprof+0x161/0x190
[ 65.994311][ T5104] ? __kvmalloc_node_noprof+0x179/0x190
[ 65.996747][ T5104] ? __kvmalloc_node_noprof+0x17a/0x190
[ 65.998807][ T5104] __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[ 66.000905][ T5104] ? tpg_update_mv_step+0x361/0x4f0
[ 66.002788][ T5104] vivid_update_format_cap+0x133c/0x2090
[ 66.004730][ T5104] ? __pfx_vivid_update_format_cap+0x10/0x10
[ 66.006972][ T5104] vivid_vid_cap_s_dv_timings+0x535/0x1230
[ 66.009059][ T5104] __video_do_ioctl+0xc23/0xdd0
[ 66.010685][ T5104] ? __pfx___video_do_ioctl+0x10/0x10
[ 66.012622][ T5104] ? __might_fault+0xc6/0x120
[ 66.014380][ T5104] video_usercopy+0x89b/0x1180
[ 66.016084][ T5104] ? __pfx___video_do_ioctl+0x10/0x10
[ 66.018076][ T5104] ? __pfx_video_usercopy+0x10/0x10
[ 66.019930][ T5104] ? __fget_files+0x29/0x470
[ 66.021516][ T5104] ? __fget_files+0x3f3/0x470
[ 66.023243][ T5104] v4l2_ioctl+0x189/0x1e0
[ 66.024907][ T5104] ? __pfx_v4l2_ioctl+0x10/0x10
[ 66.026640][ T5104] __se_sys_ioctl+0xf9/0x170
[ 66.028293][ T5104] do_syscall_64+0xf3/0x230
[ 66.029962][ T5104] ? clear_bhb_loop+0x35/0x90
[ 66.031653][ T5104] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 66.033761][ T5104] RIP: 0033:0x7f1d7657dff9
[ 66.035434][ T5104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 66.042110][ T5104] RSP: 002b:00007f1d77361038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 66.045127][ T5104] RAX: ffffffffffffffda RBX: 00007f1d76736058 RCX: 00007f1d7657dff9
[ 66.047995][ T5104] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003
[ 66.050879][ T5104] RBP: 00007f1d765f0296 R08: 0000000000000000 R09: 0000000000000000
[ 66.053734][ T5104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 66.056655][ T5104] R13: 0000000000000001 R14: 00007f1d76736058 R15: 00007ffedebace88
[ 66.059744][ T5104]
[ 66.060933][ T5104] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 66.063285][ T5104] CPU: 0 UID: 0 PID: 5104 Comm: syz.0.0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[ 66.067081][ T5104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 66.070936][ T5104] Call Trace:
[ 66.072229][ T5104]
[ 66.073351][ T5104] dump_stack_lvl+0x241/0x360
[ 66.074996][ T5104] ? __pfx_dump_stack_lvl+0x10/0x10
[ 66.076872][ T5104] ? __pfx__printk+0x10/0x10
[ 66.078502][ T5104] ? _printk+0xd5/0x120
[ 66.080082][ T5104] ? __init_begin+0x41000/0x41000
[ 66.081977][ T5104] ? vscnprintf+0x5d/0x90
[ 66.083540][ T5104] panic+0x349/0x880
[ 66.084882][ T5104] ? __warn+0x177/0x4e0
[ 66.086391][ T5104] ? __pfx_panic+0x10/0x10
[ 66.088003][ T5104] ? show_trace_log_lvl+0x3b2/0x410
[ 66.089840][ T5104] __warn+0x34b/0x4e0
[ 66.091264][ T5104] ? __kvmalloc_node_noprof+0x17a/0x190
[ 66.093282][ T5104] report_bug+0x2b3/0x500
[ 66.094850][ T5104] ? __kvmalloc_node_noprof+0x17a/0x190
[ 66.096854][ T5104] handle_bug+0x60/0x90
[ 66.098403][ T5104] exc_invalid_op+0x1a/0x50
[ 66.100020][ T5104] asm_exc_invalid_op+0x1a/0x20
[ 66.101793][ T5104] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190
[ 66.103900][ T5104] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 bf dd b9 ff 41 81 e7 00 20 00 00 74 0a e8 71 d9 b9 ff e9 3b ff ff ff e8 67 d9 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00
[ 66.110761][ T5104] RSP: 0018:ffffc9000b327930 EFLAGS: 00010283
[ 66.112946][ T5104] RAX: ffffffff81dafe79 RBX: 00000000f7b0cc00 RCX: 0000000000040000
[ 66.115732][ T5104] RDX: ffffc9000b8c1000 RSI: 00000000000007c0 RDI: 00000000000007c1
[ 66.118437][ T5104] RBP: 0000000000000000 R08: ffffffff81dafe61 R09: 00000000ffffffff
[ 66.121344][ T5104] R10: ffffc9000b3277a0 R11: fffff52001664ef9 R12: 00000000f7b0cc00
[ 66.124221][ T5104] R13: ffffc9000b327a60 R14: 00000000ffffffff R15: 0000000000000000
[ 66.127079][ T5104] ? __kvmalloc_node_noprof+0x161/0x190
[ 66.129041][ T5104] ? __kvmalloc_node_noprof+0x179/0x190
[ 66.130990][ T5104] __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[ 66.133193][ T5104] ? tpg_update_mv_step+0x361/0x4f0
[ 66.135099][ T5104] vivid_update_format_cap+0x133c/0x2090
[ 66.137221][ T5104] ? __pfx_vivid_update_format_cap+0x10/0x10
[ 66.139322][ T5104] vivid_vid_cap_s_dv_timings+0x535/0x1230
[ 66.141480][ T5104] __video_do_ioctl+0xc23/0xdd0
[ 66.143239][ T5104] ? __pfx___video_do_ioctl+0x10/0x10
[ 66.145256][ T5104] ? __might_fault+0xc6/0x120
[ 66.147006][ T5104] video_usercopy+0x89b/0x1180
[ 66.148800][ T5104] ? __pfx___video_do_ioctl+0x10/0x10
[ 66.150756][ T5104] ? __pfx_video_usercopy+0x10/0x10
[ 66.152596][ T5104] ? __fget_files+0x29/0x470
[ 66.154268][ T5104] ? __fget_files+0x3f3/0x470
[ 66.156042][ T5104] v4l2_ioctl+0x189/0x1e0
[ 66.157714][ T5104] ? __pfx_v4l2_ioctl+0x10/0x10
[ 66.159483][ T5104] __se_sys_ioctl+0xf9/0x170
[ 66.161215][ T5104] do_syscall_64+0xf3/0x230
[ 66.162838][ T5104] ? clear_bhb_loop+0x35/0x90
[ 66.164577][ T5104] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 66.166710][ T5104] RIP: 0033:0x7f1d7657dff9
[ 66.168345][ T5104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 66.175248][ T5104] RSP: 002b:00007f1d77361038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 66.178269][ T5104] RAX: ffffffffffffffda RBX: 00007f1d76736058 RCX: 00007f1d7657dff9
[ 66.181173][ T5104] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003
[ 66.184076][ T5104] RBP: 00007f1d765f0296 R08: 0000000000000000 R09: 0000000000000000
[ 66.186944][ T5104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 66.189860][ T5104] R13: 0000000000000001 R14: 00007f1d76736058 R15: 00007ffedebace88
[ 66.192764][ T5104]
[ 66.194166][ T5104] Kernel Offset: disabled
[ 66.195780][ T5104] Rebooting in 86400 seconds..