program:
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x104)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0x6}, 0x8)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
r3 = gettid()
signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x301000a, &(0x7f0000000080)=ANY=[], 0xfc, 0x2b5, &(0x7f00000001c0)="$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")
syz_usb_control_io(r2, 0x0, 0x0)
r4 = socket$phonet(0x23, 0x2, 0x1)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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")
chmod(&(0x7f0000000000)='./file0/file0\x00', 0x300)
read(r4, &(0x7f0000000040)=""/69, 0x45)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb43, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x7af, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})

[   68.816967][ T5312] Bluetooth: hci0: command tx timeout
[   69.136929][ T5320] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   69.286163][ T5320] usb 5-1: Using ep0 maxpacket: 8
[   69.293655][ T5320] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[   69.298317][ T5320] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[   69.301398][ T5320] usb 5-1: Product: syz
[   69.303133][ T5320] usb 5-1: Manufacturer: syz
[   69.304944][ T5320] usb 5-1: SerialNumber: syz
[   69.310281][ T5320] usb 5-1: config 0 descriptor??
[   69.321677][ T5320] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[   69.830591][ T5320] gspca_zc3xx: reg_w_i err -110
[   69.832109][ T5320] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110
[   69.838838][ T5328] loop0: detected capacity change from 0 to 256
[   69.908032][ T5327] loop0: detected capacity change from 0 to 256
[   69.917328][ T5327] =======================================================
[   69.917328][ T5327] WARNING: The mand mount option has been deprecated and
[   69.917328][ T5327]          and is ignored by this kernel. Remove the mand
[   69.917328][ T5327]          option from the mount to silence this warning.
[   69.917328][ T5327] =======================================================
[   70.028212][ T5328] ------------[ cut here ]------------
[   70.030635][ T5328] WARNING: CPU: 0 PID: 5328 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190
[   70.035240][ T5328] Modules linked in:
[   70.037073][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0
[   70.040861][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   70.044760][ T5328] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190
[   70.047287][ T5328] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 ff e5 b9 ff 41 81 e7 00 20 00 00 74 0a e8 b1 e1 b9 ff e9 3b ff ff ff e8 a7 e1 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00
[   70.054225][ T5328] RSP: 0018:ffffc9000d237930 EFLAGS: 00010287
[   70.056427][ T5328] RAX: ffffffff81daf879 RBX: 0000000082a0c000 RCX: 0000000000040000
[   70.059221][ T5328] RDX: ffffc9000dad9000 RSI: 00000000000007b1 RDI: 00000000000007b2
[   70.062082][ T5328] RBP: 0000000000000000 R08: ffffffff81daf861 R09: 00000000ffffffff
[   70.065045][ T5328] R10: ffffc9000d2377a0 R11: fffff52001a46ef9 R12: 0000000082a0c000
[   70.068237][ T5328] R13: ffffc9000d237a60 R14: 00000000ffffffff R15: 0000000000000000
[   70.071041][ T5328] FS:  00007fb990f016c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[   70.073997][ T5328] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   70.076297][ T5328] CR2: 00007fffcc38ea18 CR3: 000000004323e000 CR4: 0000000000352ef0
[   70.078875][ T5328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   70.081445][ T5328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   70.084226][ T5328] Call Trace:
[   70.085403][ T5328]  <TASK>
[   70.086594][ T5328]  ? __warn+0x168/0x4e0
[   70.087942][ T5328]  ? __kvmalloc_node_noprof+0x17a/0x190
[   70.089974][ T5328]  ? report_bug+0x2b3/0x500
[   70.091739][ T5328]  ? __kvmalloc_node_noprof+0x17a/0x190
[   70.093763][ T5328]  ? handle_bug+0x60/0x90
[   70.095441][ T5328]  ? exc_invalid_op+0x1a/0x50
[   70.097322][ T5328]  ? asm_exc_invalid_op+0x1a/0x20
[   70.099089][ T5328]  ? __kvmalloc_node_noprof+0x161/0x190
[   70.101124][ T5328]  ? __kvmalloc_node_noprof+0x179/0x190
[   70.103233][ T5328]  ? __kvmalloc_node_noprof+0x17a/0x190
[   70.105105][ T5328]  __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[   70.107179][ T5328]  ? tpg_update_mv_step+0x361/0x4f0
[   70.108993][ T5328]  vivid_update_format_cap+0x133c/0x2090
[   70.111039][ T5328]  ? __pfx_vivid_update_format_cap+0x10/0x10
[   70.113234][ T5328]  vivid_vid_cap_s_dv_timings+0x535/0x1230
[   70.115357][ T5328]  __video_do_ioctl+0xc23/0xdd0
[   70.117168][ T5328]  ? __pfx___video_do_ioctl+0x10/0x10
[   70.119125][ T5328]  ? __might_fault+0xc6/0x120
[   70.120871][ T5328]  video_usercopy+0x89b/0x1180
[   70.122516][ T5328]  ? __pfx___video_do_ioctl+0x10/0x10
[   70.124309][ T5328]  ? __pfx_video_usercopy+0x10/0x10
[   70.126224][ T5328]  ? __fget_files+0x29/0x470
[   70.127828][ T5328]  ? __fget_files+0x3f3/0x470
[   70.129449][ T5328]  v4l2_ioctl+0x189/0x1e0
[   70.130959][ T5328]  ? __pfx_v4l2_ioctl+0x10/0x10
[   70.132690][ T5328]  __se_sys_ioctl+0xf9/0x170
[   70.134363][ T5328]  do_syscall_64+0xf3/0x230
[   70.136130][ T5328]  ? clear_bhb_loop+0x35/0x90
[   70.137823][ T5328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.139951][ T5328] RIP: 0033:0x7fb99017e719
[   70.141419][ T5328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.148747][ T5328] RSP: 002b:00007fb990f01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   70.151697][ T5328] RAX: ffffffffffffffda RBX: 00007fb990336058 RCX: 00007fb99017e719
[   70.154685][ T5328] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003
[   70.157821][ T5328] RBP: 00007fb9901f132e R08: 0000000000000000 R09: 0000000000000000
[   70.160878][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.163939][ T5328] R13: 0000000000000000 R14: 00007fb990336058 R15: 00007fffed09c758
[   70.166949][ T5328]  </TASK>
[   70.168145][ T5328] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   70.170933][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0
[   70.175163][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   70.179855][ T5328] Call Trace:
[   70.181124][ T5328]  <TASK>
[   70.182204][ T5328]  dump_stack_lvl+0x241/0x360
[   70.183851][ T5328]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.185794][ T5328]  ? __pfx__printk+0x10/0x10
[   70.187486][ T5328]  ? _printk+0xd5/0x120
[   70.188910][ T5328]  ? __init_begin+0x41000/0x41000
[   70.190656][ T5328]  ? vscnprintf+0x5d/0x90
[   70.192104][ T5328]  panic+0x349/0x880
[   70.193371][ T5328]  ? __warn+0x177/0x4e0
[   70.194714][ T5328]  ? __pfx_panic+0x10/0x10
[   70.196172][ T5328]  ? show_trace_log_lvl+0x3b2/0x410
[   70.197881][ T5328]  __warn+0x34b/0x4e0
[   70.199178][ T5328]  ? __kvmalloc_node_noprof+0x17a/0x190
[   70.200960][ T5328]  report_bug+0x2b3/0x500
[   70.202198][ T5328]  ? __kvmalloc_node_noprof+0x17a/0x190
[   70.204024][ T5328]  handle_bug+0x60/0x90
[   70.205403][ T5328]  exc_invalid_op+0x1a/0x50
[   70.207240][ T5328]  asm_exc_invalid_op+0x1a/0x20
[   70.209101][ T5328] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190
[   70.211546][ T5328] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 ff e5 b9 ff 41 81 e7 00 20 00 00 74 0a e8 b1 e1 b9 ff e9 3b ff ff ff e8 a7 e1 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00
[   70.218164][ T5328] RSP: 0018:ffffc9000d237930 EFLAGS: 00010287
[   70.220394][ T5328] RAX: ffffffff81daf879 RBX: 0000000082a0c000 RCX: 0000000000040000
[   70.223208][ T5328] RDX: ffffc9000dad9000 RSI: 00000000000007b1 RDI: 00000000000007b2
[   70.226113][ T5328] RBP: 0000000000000000 R08: ffffffff81daf861 R09: 00000000ffffffff
[   70.228699][ T5328] R10: ffffc9000d2377a0 R11: fffff52001a46ef9 R12: 0000000082a0c000
[   70.231426][ T5328] R13: ffffc9000d237a60 R14: 00000000ffffffff R15: 0000000000000000
[   70.234495][ T5328]  ? __kvmalloc_node_noprof+0x161/0x190
[   70.236641][ T5328]  ? __kvmalloc_node_noprof+0x179/0x190
[   70.238787][ T5328]  __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[   70.240962][ T5328]  ? tpg_update_mv_step+0x361/0x4f0
[   70.242885][ T5328]  vivid_update_format_cap+0x133c/0x2090
[   70.244812][ T5328]  ? __pfx_vivid_update_format_cap+0x10/0x10
[   70.247068][ T5328]  vivid_vid_cap_s_dv_timings+0x535/0x1230
[   70.249163][ T5328]  __video_do_ioctl+0xc23/0xdd0
[   70.251090][ T5328]  ? __pfx___video_do_ioctl+0x10/0x10
[   70.252954][ T5328]  ? __might_fault+0xc6/0x120
[   70.254730][ T5328]  video_usercopy+0x89b/0x1180
[   70.256627][ T5328]  ? __pfx___video_do_ioctl+0x10/0x10
[   70.258635][ T5328]  ? __pfx_video_usercopy+0x10/0x10
[   70.260560][ T5328]  ? __fget_files+0x29/0x470
[   70.262176][ T5328]  ? __fget_files+0x3f3/0x470
[   70.263868][ T5328]  v4l2_ioctl+0x189/0x1e0
[   70.265374][ T5328]  ? __pfx_v4l2_ioctl+0x10/0x10
[   70.267085][ T5328]  __se_sys_ioctl+0xf9/0x170
[   70.268691][ T5328]  do_syscall_64+0xf3/0x230
[   70.270197][ T5328]  ? clear_bhb_loop+0x35/0x90
[   70.271886][ T5328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.274158][ T5328] RIP: 0033:0x7fb99017e719
[   70.275833][ T5328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.282677][ T5328] RSP: 002b:00007fb990f01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   70.285590][ T5328] RAX: ffffffffffffffda RBX: 00007fb990336058 RCX: 00007fb99017e719
[   70.288486][ T5328] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003
[   70.291435][ T5328] RBP: 00007fb9901f132e R08: 0000000000000000 R09: 0000000000000000
[   70.294345][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.297152][ T5328] R13: 0000000000000000 R14: 00007fb990336058 R15: 00007fffed09c758
[   70.300115][ T5328]  </TASK>
[   70.301515][ T5328] Kernel Offset: disabled
[   70.303244][ T5328] Rebooting in 86400 seconds..