Extracting prog: 4m3.641130476s
Minimizing prog: 2h36m37.927797621s
Simplifying prog options: 0s
Extracting C: 3m23.119591015s
Simplifying C: 26m49.569153356s


extracting reproducer from 38 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset-landlock_add_rule$LANDLOCK_RULE_NET_PORT-landlock_add_rule$LANDLOCK_RULE_NET_PORT-ioctl$VIDIOC_SUBSCRIBE_EVENT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x5, 0x7, 0x2})

program crashed: INFO: task hung in exit_mm
single: successfully extracted reproducer
found reproducer with 40 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset-landlock_add_rule$LANDLOCK_RULE_NET_PORT-landlock_add_rule$LANDLOCK_RULE_NET_PORT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset-landlock_add_rule$LANDLOCK_RULE_NET_PORT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
socket$xdp(0x2c, 0x3, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
userfaultfd(0x80001)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
validation run: crashed=true
reproducing took 3h20m36.488855933s
repro crashed as (corrupted=false):
INFO: task syz.0.16:6038 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:26920 pid:6038  tgid:6038  ppid:5974   task_flags:0x40044c flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5351 [inline]
 __schedule+0x1737/0x4d30 kernel/sched/core.c:6954
 __schedule_loop kernel/sched/core.c:7036 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7051
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7108
 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1088
 __down_read_common kernel/locking/rwsem.c:1263 [inline]
 __down_read kernel/locking/rwsem.c:1276 [inline]
 down_read+0x98/0x2e0 kernel/locking/rwsem.c:1541
 mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 exit_mm+0xcc/0x2c0 kernel/exit.c:557
 do_exit+0x648/0x2300 kernel/exit.c:947
 do_group_exit+0x21c/0x2d0 kernel/exit.c:1100
 get_signal+0x1286/0x1340 kernel/signal.c:3034
 arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x75/0x110 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:208 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5acf38e9e3
RSP: 002b:00007ffe8fdce308 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: fffffffffffffffc RBX: 00007f5acedff6c0 RCX: 00007f5acf38e9e3
RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe8fdce460
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/32:
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6770
2 locks held by getty/5610:
 #0: ffff8880301170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000362e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222
1 lock held by syz.0.16/6038:
 #0: ffff888078681760 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888078681760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.0.16/6039:
1 lock held by syz.1.17/6099:
 #0: ffff8880309137a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880309137a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.1.17/6100:
1 lock held by syz.2.18/6122:
 #0: ffff8880321d57e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880321d57e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.2.18/6123:
1 lock held by syz.3.19/6152:
 #0: ffff8880786862a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880786862a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.3.19/6153:
1 lock held by syz.4.20/6180:
 #0: ffff888068dacd20 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888068dacd20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.4.20/6181:
1 lock held by syz.5.21/6210:
 #0: ffff8880321d37a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880321d37a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.5.21/6211:
1 lock held by syz.6.22/6248:
 #0: ffff8880321d01e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880321d01e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.6.22/6249:
6 locks held by syz-executor/6251:
 #0: ffff88803301a428 (sb_writers#9){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3107 [inline]
 #0: ffff88803301a428 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 fs/read_write.c:682
 #1: ffff88806038b888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 fs/kernfs/file.c:325
 #2: ffffffff8e574da8 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_lock include/linux/cgroup.h:387 [inline]
 #2: ffffffff8e574da8 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 kernel/cgroup/cgroup.c:1686
 #3: ffffffff8e3d6030 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock kernel/cgroup/cgroup.c:2485 [inline]
 #3: ffffffff8e3d6030 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x186/0x610 kernel/cgroup/cgroup.c:2989
 #4: ffffffff8e575050 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_lock kernel/cgroup/cgroup.c:2487 [inline]
 #4: ffffffff8e575050 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x19c/0x610 kernel/cgroup/cgroup.c:2989
 #5: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline]
 #5: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 kernel/rcu/tree_exp.h:967

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]
 watchdog+0xf93/0xfe0 kernel/hung_task.c:491
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: events_unbound nsim_dev_trap_report_work
RIP: 0010:__lock_acquire+0xa/0xd20 kernel/locking/lockdep.c:5084
Code: cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 30 48 89 fb 65 48 8b 3c 25 08 50 e7 92 45 31 ff 83 3d 6c
RSP: 0018:ffffc90000126e98 EFLAGS: 00000006
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e53d8a0
RBP: ffffffff81730195 R08: 0000000000000000 R09: 0000000000000000
R10: ffffc900001270b8 R11: ffffffff81ac9660 R12: 0000000000000002
R13: ffffffff8e53d8a0 R14: 0000000000000000 R15: 0000000000000246
FS:  0000000000000000(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055760204100f CR3: 0000000067f6e000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871
 rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 rcu_read_lock include/linux/rcupdate.h:841 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1155 [inline]
 unwind_next_frame+0xc2/0x2390 arch/x86/kernel/unwind_orc.c:479
 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122
 save_stack+0xf5/0x1f0 mm/page_owner.c:156
 __set_page_owner+0x8d/0x4a0 mm/page_owner.c:329
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1851
 prep_new_page mm/page_alloc.c:1859 [inline]
 get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3858
 __alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:5148
 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2416
 alloc_slab_page mm/slub.c:2487 [inline]
 allocate_slab+0x8a/0x370 mm/slub.c:2655
 new_slab mm/slub.c:2709 [inline]
 ___slab_alloc+0xbeb/0x1410 mm/slub.c:3891
 __slab_alloc mm/slub.c:3981 [inline]
 __slab_alloc_node mm/slub.c:4056 [inline]
 slab_alloc_node mm/slub.c:4217 [inline]
 __do_kmalloc_node mm/slub.c:4364 [inline]
 __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 mm/slub.c:4384
 kmalloc_reserve+0x136/0x290 net/core/skbuff.c:600
 __alloc_skb+0x142/0x2d0 net/core/skbuff.c:669
 alloc_skb include/linux/skbuff.h:1336 [inline]
 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:761 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:818 [inline]
 nsim_dev_trap_report_work+0x29a/0xb80 drivers/net/netdevsim/dev.c:864
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

final repro crashed as (corrupted=false):
INFO: task syz.0.16:6038 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:26920 pid:6038  tgid:6038  ppid:5974   task_flags:0x40044c flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5351 [inline]
 __schedule+0x1737/0x4d30 kernel/sched/core.c:6954
 __schedule_loop kernel/sched/core.c:7036 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7051
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7108
 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1088
 __down_read_common kernel/locking/rwsem.c:1263 [inline]
 __down_read kernel/locking/rwsem.c:1276 [inline]
 down_read+0x98/0x2e0 kernel/locking/rwsem.c:1541
 mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 exit_mm+0xcc/0x2c0 kernel/exit.c:557
 do_exit+0x648/0x2300 kernel/exit.c:947
 do_group_exit+0x21c/0x2d0 kernel/exit.c:1100
 get_signal+0x1286/0x1340 kernel/signal.c:3034
 arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x75/0x110 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:208 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5acf38e9e3
RSP: 002b:00007ffe8fdce308 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: fffffffffffffffc RBX: 00007f5acedff6c0 RCX: 00007f5acf38e9e3
RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe8fdce460
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/32:
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6770
2 locks held by getty/5610:
 #0: ffff8880301170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000362e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222
1 lock held by syz.0.16/6038:
 #0: ffff888078681760 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888078681760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.0.16/6039:
1 lock held by syz.1.17/6099:
 #0: ffff8880309137a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880309137a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.1.17/6100:
1 lock held by syz.2.18/6122:
 #0: ffff8880321d57e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880321d57e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.2.18/6123:
1 lock held by syz.3.19/6152:
 #0: ffff8880786862a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880786862a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.3.19/6153:
1 lock held by syz.4.20/6180:
 #0: ffff888068dacd20 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888068dacd20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.4.20/6181:
1 lock held by syz.5.21/6210:
 #0: ffff8880321d37a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880321d37a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.5.21/6211:
1 lock held by syz.6.22/6248:
 #0: ffff8880321d01e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880321d01e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.6.22/6249:
6 locks held by syz-executor/6251:
 #0: ffff88803301a428 (sb_writers#9){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:3107 [inline]
 #0: ffff88803301a428 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 fs/read_write.c:682
 #1: ffff88806038b888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 fs/kernfs/file.c:325
 #2: ffffffff8e574da8 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_lock include/linux/cgroup.h:387 [inline]
 #2: ffffffff8e574da8 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 kernel/cgroup/cgroup.c:1686
 #3: ffffffff8e3d6030 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock kernel/cgroup/cgroup.c:2485 [inline]
 #3: ffffffff8e3d6030 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x186/0x610 kernel/cgroup/cgroup.c:2989
 #4: ffffffff8e575050 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_lock kernel/cgroup/cgroup.c:2487 [inline]
 #4: ffffffff8e575050 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x19c/0x610 kernel/cgroup/cgroup.c:2989
 #5: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline]
 #5: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 kernel/rcu/tree_exp.h:967

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]
 watchdog+0xf93/0xfe0 kernel/hung_task.c:491
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: events_unbound nsim_dev_trap_report_work
RIP: 0010:__lock_acquire+0xa/0xd20 kernel/locking/lockdep.c:5084
Code: cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 30 48 89 fb 65 48 8b 3c 25 08 50 e7 92 45 31 ff 83 3d 6c
RSP: 0018:ffffc90000126e98 EFLAGS: 00000006
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e53d8a0
RBP: ffffffff81730195 R08: 0000000000000000 R09: 0000000000000000
R10: ffffc900001270b8 R11: ffffffff81ac9660 R12: 0000000000000002
R13: ffffffff8e53d8a0 R14: 0000000000000000 R15: 0000000000000246
FS:  0000000000000000(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055760204100f CR3: 0000000067f6e000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871
 rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 rcu_read_lock include/linux/rcupdate.h:841 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1155 [inline]
 unwind_next_frame+0xc2/0x2390 arch/x86/kernel/unwind_orc.c:479
 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122
 save_stack+0xf5/0x1f0 mm/page_owner.c:156
 __set_page_owner+0x8d/0x4a0 mm/page_owner.c:329
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1851
 prep_new_page mm/page_alloc.c:1859 [inline]
 get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3858
 __alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:5148
 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2416
 alloc_slab_page mm/slub.c:2487 [inline]
 allocate_slab+0x8a/0x370 mm/slub.c:2655
 new_slab mm/slub.c:2709 [inline]
 ___slab_alloc+0xbeb/0x1410 mm/slub.c:3891
 __slab_alloc mm/slub.c:3981 [inline]
 __slab_alloc_node mm/slub.c:4056 [inline]
 slab_alloc_node mm/slub.c:4217 [inline]
 __do_kmalloc_node mm/slub.c:4364 [inline]
 __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 mm/slub.c:4384
 kmalloc_reserve+0x136/0x290 net/core/skbuff.c:600
 __alloc_skb+0x142/0x2d0 net/core/skbuff.c:669
 alloc_skb include/linux/skbuff.h:1336 [inline]
 nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:761 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:818 [inline]
 nsim_dev_trap_report_work+0x29a/0xb80 drivers/net/netdevsim/dev.c:864
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>