Extracting prog: 5m14.718779793s
Minimizing prog: 2h44m56.930876025s
Simplifying prog options: 0s
Extracting C: 4m22.562989279s
Simplifying C: 30m32.316004612s


extracting reproducer from 38 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset-landlock_add_rule$LANDLOCK_RULE_NET_PORT-landlock_add_rule$LANDLOCK_RULE_NET_PORT-ioctl$VIDIOC_SUBSCRIBE_EVENT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x5, 0x7, 0x2})

program crashed: INFO: task hung in mbind
single: successfully extracted reproducer
found reproducer with 40 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset-landlock_add_rule$LANDLOCK_RULE_NET_PORT-landlock_add_rule$LANDLOCK_RULE_NET_PORT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset-landlock_add_rule$LANDLOCK_RULE_NET_PORT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
socket$xdp(0x2c, 0x3, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
userfaultfd(0x80001)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
detailed listing:
executing program 0:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
detailed listing:
executing program 0:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
program crashed: INFO: task hung in exit_mm
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
detailed listing:
executing program 0:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
detailed listing:
executing program 0:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mremap-mremap
detailed listing:
executing program 0:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
validation run: crashed=true
reproducing took 3h38m39.942552154s
repro crashed as (corrupted=false):
INFO: task syz.0.16:5996 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:26184 pid:5996  tgid:5996  ppid:5949   task_flags:0x40004c flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5351 [inline]
 __schedule+0x1737/0x4d30 kernel/sched/core.c:6954
 __schedule_loop kernel/sched/core.c:7036 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7051
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7108
 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1088
 __down_read_common kernel/locking/rwsem.c:1263 [inline]
 __down_read kernel/locking/rwsem.c:1276 [inline]
 down_read+0x98/0x2e0 kernel/locking/rwsem.c:1541
 mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 exit_mm+0xcc/0x2c0 kernel/exit.c:557
 do_exit+0x648/0x2300 kernel/exit.c:947
 do_group_exit+0x21c/0x2d0 kernel/exit.c:1100
 __do_sys_exit_group kernel/exit.c:1111 [inline]
 __se_sys_exit_group kernel/exit.c:1109 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1109
 x64_sys_call+0x21f7/0x2200 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd536f8e9a9
RSP: 002b:00007ffea6f4d498 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd536f8e9a9
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000003 R08: 00000003a6f4d58f R09: 00007fd537180260
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd537180260 R14: 0000000000000003 R15: 00007ffea6f4d550
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6770
2 locks held by getty/5608:
 #0: ffff88814d57a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222
1 lock held by syz.0.16/5996:
 #0: ffff88802f802220 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88802f802220 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.0.16/5997:
1 lock held by syz.1.17/6022:
 #0: ffff888011e4ace0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888011e4ace0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.1.17/6023:
1 lock held by syz.2.18/6052:
 #0: ffff88807ed04d20 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88807ed04d20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.2.18/6053:
1 lock held by syz.3.19/6075:
 #0: ffff88802f801760 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88802f801760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.3.19/6076:
1 lock held by syz.4.20/6103:
 #0: ffff888077ff1760 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888077ff1760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.4.20/6104:
1 lock held by syz.5.21/6139:
 #0: ffff88807a1c4d20 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88807a1c4d20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.5.21/6140:
1 lock held by syz.6.22/6169:
 #0: ffff88806b238ca0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88806b238ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.6.22/6170:
1 lock held by syz.7.23/6199:
 #0: ffff888011e4ed60 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888011e4ed60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.7.23/6200:

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]
 watchdog+0xf93/0xfe0 kernel/hung_task.c:491
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: bat_events batadv_nc_worker
RIP: 0010:hlock_class kernel/locking/lockdep.c:234 [inline]
RIP: 0010:__lock_acquire+0xa4f/0xd20 kernel/locking/lockdep.c:5237
Code: e5 ff 90 0f 0b 90 90 90 31 c0 48 8b 3c 24 48 83 78 40 00 0f 84 8c 02 00 00 41 8b 46 20 25 ff 1f 00 00 48 0f a3 05 91 52 51 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 30 13 90 93 eb 40 83 3d f8 e1
RSP: 0018:ffffc90000b978f0 EFLAGS: 00000003
RAX: 0000000000000007 RBX: 0000000000000002 RCX: 00000000b53b6023
RDX: 00000000e34a5b19 RSI: 00000000aeac0ba5 RDI: ffff888021ac1e00
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b4d0e32
R10: dffffc0000000000 R11: ffffffff8b4d0d60 R12: 000000003bfebe81
R13: ffff888021ac28f0 R14: ffff888021ac2940 R15: c7386069b53b6023
FS:  0000000000000000(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6c5e6dd4c0 CR3: 000000007fcf8000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871
 rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 rcu_read_lock include/linux/rcupdate.h:841 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
 batadv_nc_worker+0xef/0x610 net/batman-adv/network-coding.c:719
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

final repro crashed as (corrupted=false):
INFO: task syz.0.16:5996 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:26184 pid:5996  tgid:5996  ppid:5949   task_flags:0x40004c flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5351 [inline]
 __schedule+0x1737/0x4d30 kernel/sched/core.c:6954
 __schedule_loop kernel/sched/core.c:7036 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7051
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7108
 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1088
 __down_read_common kernel/locking/rwsem.c:1263 [inline]
 __down_read kernel/locking/rwsem.c:1276 [inline]
 down_read+0x98/0x2e0 kernel/locking/rwsem.c:1541
 mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 exit_mm+0xcc/0x2c0 kernel/exit.c:557
 do_exit+0x648/0x2300 kernel/exit.c:947
 do_group_exit+0x21c/0x2d0 kernel/exit.c:1100
 __do_sys_exit_group kernel/exit.c:1111 [inline]
 __se_sys_exit_group kernel/exit.c:1109 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1109
 x64_sys_call+0x21f7/0x2200 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd536f8e9a9
RSP: 002b:00007ffea6f4d498 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd536f8e9a9
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000003 R08: 00000003a6f4d58f R09: 00007fd537180260
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd537180260 R14: 0000000000000003 R15: 00007ffea6f4d550
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6770
2 locks held by getty/5608:
 #0: ffff88814d57a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222
1 lock held by syz.0.16/5996:
 #0: ffff88802f802220 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88802f802220 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.0.16/5997:
1 lock held by syz.1.17/6022:
 #0: ffff888011e4ace0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888011e4ace0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.1.17/6023:
1 lock held by syz.2.18/6052:
 #0: ffff88807ed04d20 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88807ed04d20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.2.18/6053:
1 lock held by syz.3.19/6075:
 #0: ffff88802f801760 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88802f801760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.3.19/6076:
1 lock held by syz.4.20/6103:
 #0: ffff888077ff1760 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888077ff1760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.4.20/6104:
1 lock held by syz.5.21/6139:
 #0: ffff88807a1c4d20 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88807a1c4d20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.5.21/6140:
1 lock held by syz.6.22/6169:
 #0: ffff88806b238ca0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88806b238ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.6.22/6170:
1 lock held by syz.7.23/6199:
 #0: ffff888011e4ed60 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888011e4ed60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.7.23/6200:

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]
 watchdog+0xf93/0xfe0 kernel/hung_task.c:491
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: bat_events batadv_nc_worker
RIP: 0010:hlock_class kernel/locking/lockdep.c:234 [inline]
RIP: 0010:__lock_acquire+0xa4f/0xd20 kernel/locking/lockdep.c:5237
Code: e5 ff 90 0f 0b 90 90 90 31 c0 48 8b 3c 24 48 83 78 40 00 0f 84 8c 02 00 00 41 8b 46 20 25 ff 1f 00 00 48 0f a3 05 91 52 51 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 30 13 90 93 eb 40 83 3d f8 e1
RSP: 0018:ffffc90000b978f0 EFLAGS: 00000003
RAX: 0000000000000007 RBX: 0000000000000002 RCX: 00000000b53b6023
RDX: 00000000e34a5b19 RSI: 00000000aeac0ba5 RDI: ffff888021ac1e00
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b4d0e32
R10: dffffc0000000000 R11: ffffffff8b4d0d60 R12: 000000003bfebe81
R13: ffff888021ac28f0 R14: ffff888021ac2940 R15: c7386069b53b6023
FS:  0000000000000000(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6c5e6dd4c0 CR3: 000000007fcf8000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871
 rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 rcu_read_lock include/linux/rcupdate.h:841 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
 batadv_nc_worker+0xef/0x610 net/batman-adv/network-coding.c:719
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>