program: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) [ 58.467504][ T5332] ------------[ cut here ]------------ [ 58.469561][ T5332] WARNING: CPU: 0 PID: 5332 at mm/util.c:670 __kvmalloc_node_noprof+0x17a/0x190 [ 58.472829][ T5332] Modules linked in: [ 58.474196][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 58.477922][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.481610][ T5332] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 58.483836][ T5332] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 ef e5 b9 ff 41 81 e7 00 20 00 00 74 0a e8 a1 e1 b9 ff e9 3b ff ff ff e8 97 e1 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 58.491308][ T5332] RSP: 0018:ffffc9000d187930 EFLAGS: 00010287 [ 58.493608][ T5332] RAX: ffffffff81db08d9 RBX: 00000000852e7e00 RCX: 0000000000040000 [ 58.496837][ T5332] RDX: ffffc9000d6f1000 RSI: 00000000000007b1 RDI: 00000000000007b2 [ 58.499875][ T5332] RBP: 0000000000000000 R08: ffffffff81db08c1 R09: 00000000ffffffff [ 58.502876][ T5332] R10: ffffc9000d1877a0 R11: fffff52001a30ef9 R12: 00000000852e7e00 [ 58.506108][ T5332] R13: ffffc9000d187a60 R14: 00000000ffffffff R15: 0000000000000000 [ 58.509165][ T5332] FS: 00007f2f3d9a16c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 58.512304][ T5332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.514842][ T5332] CR2: 00007f2f3cd2a290 CR3: 000000003d520000 CR4: 0000000000352ef0 [ 58.518002][ T5332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.521235][ T5332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.524310][ T5332] Call Trace: [ 58.525729][ T5332] [ 58.526910][ T5332] ? __warn+0x168/0x4e0 [ 58.528535][ T5332] ? __kvmalloc_node_noprof+0x17a/0x190 [ 58.530647][ T5332] ? report_bug+0x2b3/0x500 [ 58.532428][ T5332] ? __kvmalloc_node_noprof+0x17a/0x190 [ 58.534566][ T5332] ? handle_bug+0x60/0x90 [ 58.536442][ T5332] ? exc_invalid_op+0x1a/0x50 [ 58.538412][ T5332] ? asm_exc_invalid_op+0x1a/0x20 [ 58.540393][ T5332] ? __kvmalloc_node_noprof+0x161/0x190 [ 58.542588][ T5332] ? __kvmalloc_node_noprof+0x179/0x190 [ 58.544766][ T5332] ? __kvmalloc_node_noprof+0x17a/0x190 [ 58.547017][ T5332] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 58.549340][ T5332] ? tpg_update_mv_step+0x361/0x4f0 [ 58.551202][ T5332] vivid_update_format_cap+0x133c/0x2090 [ 58.553188][ T5332] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 58.555276][ T5332] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 58.557480][ T5332] __video_do_ioctl+0xc23/0xdd0 [ 58.559260][ T5332] ? __pfx___video_do_ioctl+0x10/0x10 [ 58.561200][ T5332] ? __might_fault+0xc6/0x120 [ 58.562901][ T5332] video_usercopy+0x89b/0x1180 [ 58.564679][ T5332] ? __pfx___video_do_ioctl+0x10/0x10 [ 58.566899][ T5332] ? __pfx_video_usercopy+0x10/0x10 [ 58.568960][ T5332] ? __fget_files+0x29/0x470 [ 58.570692][ T5332] ? __fget_files+0x3f3/0x470 [ 58.572545][ T5332] v4l2_ioctl+0x189/0x1e0 [ 58.574256][ T5332] ? __pfx_v4l2_ioctl+0x10/0x10 [ 58.577222][ T5332] __se_sys_ioctl+0xf9/0x170 [ 58.579136][ T5332] do_syscall_64+0xf3/0x230 [ 58.580910][ T5332] ? clear_bhb_loop+0x35/0x90 [ 58.582826][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.585109][ T5332] RIP: 0033:0x7f2f3cb7e719 [ 58.586953][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.595225][ T5332] RSP: 002b:00007f2f3d9a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.598733][ T5332] RAX: ffffffffffffffda RBX: 00007f2f3cd35f80 RCX: 00007f2f3cb7e719 [ 58.601752][ T5332] RDX: 0000000020000040 RSI: 00000000c0845657 RDI: 0000000000000003 [ 58.604487][ T5332] RBP: 00007f2f3cbf132e R08: 0000000000000000 R09: 0000000000000000 [ 58.607312][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.610285][ T5332] R13: 0000000000000000 R14: 00007f2f3cd35f80 R15: 00007ffe79135168 [ 58.613373][ T5332] [ 58.614528][ T5332] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.617184][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 58.620863][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.624901][ T5332] Call Trace: [ 58.626266][ T5332] [ 58.627423][ T5332] dump_stack_lvl+0x241/0x360 [ 58.629262][ T5332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.631260][ T5332] ? __pfx__printk+0x10/0x10 [ 58.632997][ T5332] ? _printk+0xd5/0x120 [ 58.634716][ T5332] ? __init_begin+0x41000/0x41000 [ 58.636712][ T5332] ? vscnprintf+0x5d/0x90 [ 58.638428][ T5332] panic+0x349/0x880 [ 58.639995][ T5332] ? __warn+0x177/0x4e0 [ 58.641610][ T5332] ? __pfx_panic+0x10/0x10 [ 58.643379][ T5332] ? show_trace_log_lvl+0x3b2/0x410 [ 58.645437][ T5332] __warn+0x34b/0x4e0 [ 58.647026][ T5332] ? __kvmalloc_node_noprof+0x17a/0x190 [ 58.648988][ T5332] report_bug+0x2b3/0x500 [ 58.650788][ T5332] ? __kvmalloc_node_noprof+0x17a/0x190 [ 58.652955][ T5332] handle_bug+0x60/0x90 [ 58.654648][ T5332] exc_invalid_op+0x1a/0x50 [ 58.656337][ T5332] asm_exc_invalid_op+0x1a/0x20 [ 58.658279][ T5332] RIP: 0010:__kvmalloc_node_noprof+0x17a/0x190 [ 58.660448][ T5332] Code: cc 44 89 fe 81 e6 00 20 00 00 31 ff e8 ef e5 b9 ff 41 81 e7 00 20 00 00 74 0a e8 a1 e1 b9 ff e9 3b ff ff ff e8 97 e1 b9 ff 90 <0f> 0b 90 e9 2d ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 58.667609][ T5332] RSP: 0018:ffffc9000d187930 EFLAGS: 00010287 [ 58.669913][ T5332] RAX: ffffffff81db08d9 RBX: 00000000852e7e00 RCX: 0000000000040000 [ 58.672844][ T5332] RDX: ffffc9000d6f1000 RSI: 00000000000007b1 RDI: 00000000000007b2 [ 58.675531][ T5332] RBP: 0000000000000000 R08: ffffffff81db08c1 R09: 00000000ffffffff [ 58.678621][ T5332] R10: ffffc9000d1877a0 R11: fffff52001a30ef9 R12: 00000000852e7e00 [ 58.681645][ T5332] R13: ffffc9000d187a60 R14: 00000000ffffffff R15: 0000000000000000 [ 58.684573][ T5332] ? __kvmalloc_node_noprof+0x161/0x190 [ 58.686712][ T5332] ? __kvmalloc_node_noprof+0x179/0x190 [ 58.688719][ T5332] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 58.691039][ T5332] ? tpg_update_mv_step+0x361/0x4f0 [ 58.693066][ T5332] vivid_update_format_cap+0x133c/0x2090 [ 58.695301][ T5332] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 58.697591][ T5332] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 58.699763][ T5332] __video_do_ioctl+0xc23/0xdd0 [ 58.701683][ T5332] ? __pfx___video_do_ioctl+0x10/0x10 [ 58.703692][ T5332] ? __might_fault+0xc6/0x120 [ 58.705417][ T5332] video_usercopy+0x89b/0x1180 [ 58.707330][ T5332] ? __pfx___video_do_ioctl+0x10/0x10 [ 58.709437][ T5332] ? __pfx_video_usercopy+0x10/0x10 [ 58.711531][ T5332] ? __fget_files+0x29/0x470 [ 58.713385][ T5332] ? __fget_files+0x3f3/0x470 [ 58.715200][ T5332] v4l2_ioctl+0x189/0x1e0 [ 58.716771][ T5332] ? __pfx_v4l2_ioctl+0x10/0x10 [ 58.718636][ T5332] __se_sys_ioctl+0xf9/0x170 [ 58.720278][ T5332] do_syscall_64+0xf3/0x230 [ 58.721893][ T5332] ? clear_bhb_loop+0x35/0x90 [ 58.723665][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.725922][ T5332] RIP: 0033:0x7f2f3cb7e719 [ 58.727592][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.734587][ T5332] RSP: 002b:00007f2f3d9a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.737659][ T5332] RAX: ffffffffffffffda RBX: 00007f2f3cd35f80 RCX: 00007f2f3cb7e719 [ 58.740571][ T5332] RDX: 0000000020000040 RSI: 00000000c0845657 RDI: 0000000000000003 [ 58.743633][ T5332] RBP: 00007f2f3cbf132e R08: 0000000000000000 R09: 0000000000000000 [ 58.746623][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.749675][ T5332] R13: 0000000000000000 R14: 00007f2f3cd35f80 R15: 00007ffe79135168 [ 58.752808][ T5332] [ 58.754330][ T5332] Kernel Offset: disabled [ 58.756124][ T5332] Rebooting in 86400 seconds..