Extracting prog: 4m17.436469721s
Minimizing prog: 2h34m17.368237724s
Simplifying prog options: 0s
Extracting C: 3m13.733544184s
Simplifying C: 30m49.922509325s


extracting reproducer from 38 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset-landlock_add_rule$LANDLOCK_RULE_NET_PORT-landlock_add_rule$LANDLOCK_RULE_NET_PORT-ioctl$VIDIOC_SUBSCRIBE_EVENT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x5, 0x7, 0x2})

program crashed: INFO: task hung in exit_mm
single: successfully extracted reproducer
found reproducer with 40 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset-landlock_add_rule$LANDLOCK_RULE_NET_PORT-landlock_add_rule$LANDLOCK_RULE_NET_PORT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset-landlock_add_rule$LANDLOCK_RULE_NET_PORT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
socket$xdp(0x2c, 0x3, 0x0)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
userfaultfd(0x80001)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
validation run: crashed=true
reproducing took 3h23m55.96803913s
repro crashed as (corrupted=false):
INFO: task syz.0.16:6011 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:25096 pid:6011  tgid:6011  ppid:5951   task_flags:0x40044c flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5351 [inline]
 __schedule+0x1737/0x4d30 kernel/sched/core.c:6954
 __schedule_loop kernel/sched/core.c:7036 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7051
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7108
 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1088
 __down_read_common kernel/locking/rwsem.c:1263 [inline]
 __down_read kernel/locking/rwsem.c:1276 [inline]
 down_read+0x98/0x2e0 kernel/locking/rwsem.c:1541
 mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 exit_mm+0xcc/0x2c0 kernel/exit.c:557
 do_exit+0x648/0x2300 kernel/exit.c:947
 do_group_exit+0x21c/0x2d0 kernel/exit.c:1100
 get_signal+0x1286/0x1340 kernel/signal.c:3034
 arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x75/0x110 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:208 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f34b1b8e9e3
RSP: 002b:00007fff835a5f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: fffffffffffffffc RBX: 00007f34b13ff6c0 RCX: 00007f34b1b8e9e3
RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000020022 R11: 0000000000000246 R12: 00007fff835a60d0
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
3 locks held by kworker/u8:0/12:
1 lock held by khungtaskd/31:
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6770
3 locks held by kworker/u8:4/77:
 #0: ffff88814d0d0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88814d0d0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3319
 #1: ffffc9000217fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc9000217fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3319
 #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 net/ipv6/addrconf.c:4189
2 locks held by getty/5609:
 #0: ffff8880303ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222
1 lock held by syz.0.16/6011:
 #0: ffff8880777a2220 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880777a2220 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.0.16/6012:
1 lock held by syz.1.17/6037:
 #0: ffff888078ad8ca0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888078ad8ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.1.17/6038:
1 lock held by syz.2.18/6065:
 #0: ffff88802f7b9760 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88802f7b9760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.2.18/6066:
1 lock held by syz.3.19/6087:
 #0: ffff8880324bc260 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880324bc260 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.3.19/6088:
1 lock held by syz.4.20/6116:
 #0: ffff88802a07c260 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88802a07c260 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.4.20/6117:
1 lock held by syz.5.21/6153:
 #0: ffff888022762220 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888022762220 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.5.21/6154:
1 lock held by syz.6.22/6184:
 #0: ffff8880324be2a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880324be2a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.6.22/6185:
3 locks held by syz-executor/6188:
 #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 net/core/rtnetlink.c:4056
 #1: ffff8880614b14e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x227/0x420 drivers/net/wireguard/device.c:50
 #2: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline]
 #2: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 kernel/rcu/tree_exp.h:967

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]
 watchdog+0xf93/0xfe0 kernel/hung_task.c:491
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker
RIP: 0010:blake2s_update+0x20c/0x450 lib/crypto/blake2s.c:44
Code: 0f b6 04 2f 84 c0 0f 85 af 00 00 00 41 8b 1e bf 41 00 00 00 89 de e8 53 b3 ef fc 48 83 fb 40 0f 87 b4 00 00 00 e8 04 af ef fc <4d> 89 e5 41 0f b6 04 2f 84 c0 0f 85 fe 00 00 00 48 83 44 24 10 30
RSP: 0018:ffffc90000b37590 EFLAGS: 00000293
RAX: ffffffff84d0520c RBX: 0000000000000000 RCX: ffff88801eae8000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000041
RBP: dffffc0000000000 R08: ffffffff8fe3cf37 R09: 1ffffffff1fc79e6
R10: dffffc0000000000 R11: fffffbfff1fc79e7 R12: 0000000000000034
R13: ffff88807d5fc0b0 R14: ffffc90000b37690 R15: 1ffff92000166ed2
FS:  0000000000000000(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007febac4522b4 CR3: 000000007e7fe000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 blake2s include/crypto/blake2s.h:100 [inline]
 compute_mac1+0x145/0x1a0 drivers/net/wireguard/cookie.c:80
 wg_cookie_validate_packet+0x129/0x320 drivers/net/wireguard/cookie.c:130
 wg_receive_handshake_packet drivers/net/wireguard/receive.c:121 [inline]
 wg_packet_handshake_receive_worker+0x47a/0xfb0 drivers/net/wireguard/receive.c:213
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

final repro crashed as (corrupted=false):
INFO: task syz.0.16:6011 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:25096 pid:6011  tgid:6011  ppid:5951   task_flags:0x40044c flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5351 [inline]
 __schedule+0x1737/0x4d30 kernel/sched/core.c:6954
 __schedule_loop kernel/sched/core.c:7036 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7051
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7108
 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1088
 __down_read_common kernel/locking/rwsem.c:1263 [inline]
 __down_read kernel/locking/rwsem.c:1276 [inline]
 down_read+0x98/0x2e0 kernel/locking/rwsem.c:1541
 mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 exit_mm+0xcc/0x2c0 kernel/exit.c:557
 do_exit+0x648/0x2300 kernel/exit.c:947
 do_group_exit+0x21c/0x2d0 kernel/exit.c:1100
 get_signal+0x1286/0x1340 kernel/signal.c:3034
 arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x75/0x110 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:208 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f34b1b8e9e3
RSP: 002b:00007fff835a5f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: fffffffffffffffc RBX: 00007f34b13ff6c0 RCX: 00007f34b1b8e9e3
RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000020022 R11: 0000000000000246 R12: 00007fff835a60d0
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
3 locks held by kworker/u8:0/12:
1 lock held by khungtaskd/31:
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6770
3 locks held by kworker/u8:4/77:
 #0: ffff88814d0d0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88814d0d0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3319
 #1: ffffc9000217fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc9000217fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3319
 #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
 #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 net/ipv6/addrconf.c:4189
2 locks held by getty/5609:
 #0: ffff8880303ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222
1 lock held by syz.0.16/6011:
 #0: ffff8880777a2220 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880777a2220 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.0.16/6012:
1 lock held by syz.1.17/6037:
 #0: ffff888078ad8ca0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888078ad8ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.1.17/6038:
1 lock held by syz.2.18/6065:
 #0: ffff88802f7b9760 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88802f7b9760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.2.18/6066:
1 lock held by syz.3.19/6087:
 #0: ffff8880324bc260 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880324bc260 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.3.19/6088:
1 lock held by syz.4.20/6116:
 #0: ffff88802a07c260 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88802a07c260 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.4.20/6117:
1 lock held by syz.5.21/6153:
 #0: ffff888022762220 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888022762220 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.5.21/6154:
1 lock held by syz.6.22/6184:
 #0: ffff8880324be2a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880324be2a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.6.22/6185:
3 locks held by syz-executor/6188:
 #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 net/core/rtnetlink.c:4056
 #1: ffff8880614b14e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x227/0x420 drivers/net/wireguard/device.c:50
 #2: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline]
 #2: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 kernel/rcu/tree_exp.h:967

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]
 watchdog+0xf93/0xfe0 kernel/hung_task.c:491
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker
RIP: 0010:blake2s_update+0x20c/0x450 lib/crypto/blake2s.c:44
Code: 0f b6 04 2f 84 c0 0f 85 af 00 00 00 41 8b 1e bf 41 00 00 00 89 de e8 53 b3 ef fc 48 83 fb 40 0f 87 b4 00 00 00 e8 04 af ef fc <4d> 89 e5 41 0f b6 04 2f 84 c0 0f 85 fe 00 00 00 48 83 44 24 10 30
RSP: 0018:ffffc90000b37590 EFLAGS: 00000293
RAX: ffffffff84d0520c RBX: 0000000000000000 RCX: ffff88801eae8000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000041
RBP: dffffc0000000000 R08: ffffffff8fe3cf37 R09: 1ffffffff1fc79e6
R10: dffffc0000000000 R11: fffffbfff1fc79e7 R12: 0000000000000034
R13: ffff88807d5fc0b0 R14: ffffc90000b37690 R15: 1ffff92000166ed2
FS:  0000000000000000(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007febac4522b4 CR3: 000000007e7fe000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 blake2s include/crypto/blake2s.h:100 [inline]
 compute_mac1+0x145/0x1a0 drivers/net/wireguard/cookie.c:80
 wg_cookie_validate_packet+0x129/0x320 drivers/net/wireguard/cookie.c:130
 wg_receive_handshake_packet drivers/net/wireguard/receive.c:121 [inline]
 wg_packet_handshake_receive_worker+0x47a/0xfb0 drivers/net/wireguard/receive.c:213
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>