program: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000004500)={0x90, 0x8000000000000001}, 0x90) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb43, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0xbd6, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x5}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) write$sequencer(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="78009c0b17ffa09d"], 0x8) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb70, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x440, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) [ 68.671673][ T4670] Bluetooth: hci0: command tx timeout [ 68.764159][ T5323] ------------[ cut here ]------------ [ 68.766165][ T5323] WARNING: CPU: 0 PID: 5323 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190 [ 68.769667][ T5323] Modules linked in: [ 68.771302][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 68.775012][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.779287][ T5323] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 68.781936][ T5323] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 ff e5 b9 ff 41 81 e7 00 20 00 00 74 0a e8 b1 e1 b9 ff e9 3b ff ff ff e8 a7 e1 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 68.789655][ T5323] RSP: 0018:ffffc9000d5df930 EFLAGS: 00010287 [ 68.791980][ T5323] RAX: ffffffff81daf879 RBX: 000000008e027000 RCX: 0000000000040000 [ 68.794994][ T5323] RDX: ffffc9000d341000 RSI: 00000000000007b1 RDI: 00000000000007b2 [ 68.797926][ T5323] RBP: 0000000000000000 R08: ffffffff81daf861 R09: 00000000ffffffff [ 68.801007][ T5323] R10: ffffc9000d5df7a0 R11: fffff52001abbef9 R12: 000000008e027000 [ 68.803959][ T5323] R13: ffffc9000d5dfa60 R14: 00000000ffffffff R15: 0000000000000000 [ 68.806873][ T5323] FS: 00007fb4deb276c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 68.810305][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.812767][ T5323] CR2: 0000000020004500 CR3: 000000003a9b2000 CR4: 0000000000352ef0 [ 68.815711][ T5323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.818607][ T5323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.821622][ T5323] Call Trace: [ 68.822834][ T5323] [ 68.823920][ T5323] ? __warn+0x168/0x4e0 [ 68.825484][ T5323] ? __kvmalloc_node_noprof+0x17a/0x190 [ 68.827538][ T5323] ? report_bug+0x2b3/0x500 [ 68.829459][ T5323] ? __kvmalloc_node_noprof+0x17a/0x190 [ 68.831501][ T5323] ? handle_bug+0x60/0x90 [ 68.833128][ T5323] ? exc_invalid_op+0x1a/0x50 [ 68.834924][ T5323] ? asm_exc_invalid_op+0x1a/0x20 [ 68.837152][ T5323] ? __kvmalloc_node_noprof+0x161/0x190 [ 68.839457][ T5323] ? __kvmalloc_node_noprof+0x179/0x190 [ 68.841347][ T5323] ? __kvmalloc_node_noprof+0x17a/0x190 [ 68.843321][ T5323] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 68.845505][ T5323] ? tpg_update_mv_step+0x361/0x4f0 [ 68.847268][ T5323] vivid_update_format_cap+0x133c/0x2090 [ 68.849338][ T5323] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 68.851316][ T5323] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 68.853526][ T5323] __video_do_ioctl+0xc23/0xdd0 [ 68.855339][ T5323] ? __pfx___video_do_ioctl+0x10/0x10 [ 68.857369][ T5323] ? __might_fault+0xc6/0x120 [ 68.859252][ T5323] video_usercopy+0x89b/0x1180 [ 68.861097][ T5323] ? __pfx___video_do_ioctl+0x10/0x10 [ 68.863090][ T5323] ? __pfx_video_usercopy+0x10/0x10 [ 68.865031][ T5323] ? __fget_files+0x29/0x470 [ 68.866756][ T5323] ? __fget_files+0x3f3/0x470 [ 68.868540][ T5323] v4l2_ioctl+0x189/0x1e0 [ 68.870264][ T5323] ? __pfx_v4l2_ioctl+0x10/0x10 [ 68.872084][ T5323] __se_sys_ioctl+0xf9/0x170 [ 68.873842][ T5323] do_syscall_64+0xf3/0x230 [ 68.876012][ T5323] ? clear_bhb_loop+0x35/0x90 [ 68.877816][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.880148][ T5323] RIP: 0033:0x7fb4ddd7e719 [ 68.883755][ T5323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.891230][ T5323] RSP: 002b:00007fb4deb27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.894293][ T5323] RAX: ffffffffffffffda RBX: 00007fb4ddf35f80 RCX: 00007fb4ddd7e719 [ 68.897167][ T5323] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000005 [ 68.900387][ T5323] RBP: 00007fb4dddf132e R08: 0000000000000000 R09: 0000000000000000 [ 68.903359][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.906222][ T5323] R13: 0000000000000000 R14: 00007fb4ddf35f80 R15: 00007ffec2cdce98 [ 68.909081][ T5323] [ 68.910231][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.912920][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 68.916925][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.920823][ T5323] Call Trace: [ 68.922079][ T5323] [ 68.923197][ T5323] dump_stack_lvl+0x241/0x360 [ 68.925015][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.926982][ T5323] ? __pfx__printk+0x10/0x10 [ 68.928703][ T5323] ? _printk+0xd5/0x120 [ 68.930220][ T5323] ? __init_begin+0x41000/0x41000 [ 68.932136][ T5323] ? vscnprintf+0x5d/0x90 [ 68.933756][ T5323] panic+0x349/0x880 [ 68.935207][ T5323] ? __warn+0x177/0x4e0 [ 68.936761][ T5323] ? __pfx_panic+0x10/0x10 [ 68.938329][ T5323] ? show_trace_log_lvl+0x3b2/0x410 [ 68.940247][ T5323] __warn+0x34b/0x4e0 [ 68.941679][ T5323] ? __kvmalloc_node_noprof+0x17a/0x190 [ 68.943794][ T5323] report_bug+0x2b3/0x500 [ 68.945601][ T5323] ? __kvmalloc_node_noprof+0x17a/0x190 [ 68.947776][ T5323] handle_bug+0x60/0x90 [ 68.949337][ T5323] exc_invalid_op+0x1a/0x50 [ 68.951124][ T5323] asm_exc_invalid_op+0x1a/0x20 [ 68.952958][ T5323] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 68.955228][ T5323] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 ff e5 b9 ff 41 81 e7 00 20 00 00 74 0a e8 b1 e1 b9 ff e9 3b ff ff ff e8 a7 e1 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 68.962155][ T5323] RSP: 0018:ffffc9000d5df930 EFLAGS: 00010287 [ 68.964442][ T5323] RAX: ffffffff81daf879 RBX: 000000008e027000 RCX: 0000000000040000 [ 68.967532][ T5323] RDX: ffffc9000d341000 RSI: 00000000000007b1 RDI: 00000000000007b2 [ 68.970429][ T5323] RBP: 0000000000000000 R08: ffffffff81daf861 R09: 00000000ffffffff [ 68.973431][ T5323] R10: ffffc9000d5df7a0 R11: fffff52001abbef9 R12: 000000008e027000 [ 68.976377][ T5323] R13: ffffc9000d5dfa60 R14: 00000000ffffffff R15: 0000000000000000 [ 68.979375][ T5323] ? __kvmalloc_node_noprof+0x161/0x190 [ 68.981522][ T5323] ? __kvmalloc_node_noprof+0x179/0x190 [ 68.983540][ T5323] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 68.985764][ T5323] ? tpg_update_mv_step+0x361/0x4f0 [ 68.987690][ T5323] vivid_update_format_cap+0x133c/0x2090 [ 68.989819][ T5323] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 68.992244][ T5323] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 68.994519][ T5323] __video_do_ioctl+0xc23/0xdd0 [ 68.996442][ T5323] ? __pfx___video_do_ioctl+0x10/0x10 [ 68.998576][ T5323] ? __might_fault+0xc6/0x120 [ 69.000489][ T5323] video_usercopy+0x89b/0x1180 [ 69.002433][ T5323] ? __pfx___video_do_ioctl+0x10/0x10 [ 69.004511][ T5323] ? __pfx_video_usercopy+0x10/0x10 [ 69.006474][ T5323] ? __fget_files+0x29/0x470 [ 69.008085][ T5323] ? __fget_files+0x3f3/0x470 [ 69.009717][ T5323] v4l2_ioctl+0x189/0x1e0 [ 69.011134][ T5323] ? __pfx_v4l2_ioctl+0x10/0x10 [ 69.012990][ T5323] __se_sys_ioctl+0xf9/0x170 [ 69.014808][ T5323] do_syscall_64+0xf3/0x230 [ 69.016582][ T5323] ? clear_bhb_loop+0x35/0x90 [ 69.018629][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.021358][ T5323] RIP: 0033:0x7fb4ddd7e719 [ 69.023188][ T5323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.030494][ T5323] RSP: 002b:00007fb4deb27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.033514][ T5323] RAX: ffffffffffffffda RBX: 00007fb4ddf35f80 RCX: 00007fb4ddd7e719 [ 69.036480][ T5323] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000005 [ 69.039485][ T5323] RBP: 00007fb4dddf132e R08: 0000000000000000 R09: 0000000000000000 [ 69.042312][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.045052][ T5323] R13: 0000000000000000 R14: 00007fb4ddf35f80 R15: 00007ffec2cdce98 [ 69.048178][ T5323] [ 69.049659][ T5323] Kernel Offset: disabled [ 69.051352][ T5323] Rebooting in 86400 seconds..