Extracting prog: 3m39.818419402s
Minimizing prog: 2h44m15.330052606s
Simplifying prog options: 0s
Extracting C: 4m33.357411479s
Simplifying C: 35m9.159151629s


extracting reproducer from 38 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset-landlock_add_rule$LANDLOCK_RULE_NET_PORT-landlock_add_rule$LANDLOCK_RULE_NET_PORT-ioctl$VIDIOC_SUBSCRIBE_EVENT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x5, 0x7, 0x2})

program crashed: INFO: task hung in mbind
single: successfully extracted reproducer
found reproducer with 40 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset-landlock_add_rule$LANDLOCK_RULE_NET_PORT-landlock_add_rule$LANDLOCK_RULE_NET_PORT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset-landlock_add_rule$LANDLOCK_RULE_NET_PORT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT-landlock_create_ruleset
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN-ioctl$VIDIOC_SUBSCRIBE_EVENT
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages-ioctl$KVM_SET_MSRS
detailed listing:
executing program 0:
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages-move_pages
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY-move_pages
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-ioctl$UFFDIO_COPY
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-setsockopt$XDP_UMEM_REG
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp-setsockopt$XDP_UMEM_REG
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise-socket$xdp
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
socket$xdp(0x2c, 0x3, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-madvise
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_API
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd-ioctl$UFFDIO_API
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-userfaultfd
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
userfaultfd(0x80001)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind-ioctl$KVM_CREATE_VM
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)

program crashed: INFO: task hung in mbind
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap-mbind
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mbind-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mmap-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-openat$kvm-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-ioctl$VIDIOC_SUBSCRIBE_EVENT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-openat$vimc1-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-ioctl$VIDIOC_S_INPUT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_S_INPUT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x6) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-ioctl$VIDIOC_G_FMT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-ioctl$VIDIOC_G_FMT-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-syz_open_dev$video-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): creat-mremap-mremap
detailed listing:
executing program 0:
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
program crashed: INFO: task hung in exit_mm
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap-mremap
detailed listing:
executing program 0:
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)

program crashed: INFO: task hung in exit_mm
validation run: crashed=true
reproducing took 3h38m24.052527354s
repro crashed as (corrupted=false):
INFO: task syz.0.16:6030 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:26920 pid:6030  tgid:6030  ppid:5968   task_flags:0x40044c flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5351 [inline]
 __schedule+0x1737/0x4d30 kernel/sched/core.c:6954
 __schedule_loop kernel/sched/core.c:7036 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7051
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7108
 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1088
 __down_read_common kernel/locking/rwsem.c:1263 [inline]
 __down_read kernel/locking/rwsem.c:1276 [inline]
 down_read+0x98/0x2e0 kernel/locking/rwsem.c:1541
 mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 exit_mm+0xcc/0x2c0 kernel/exit.c:557
 do_exit+0x648/0x2300 kernel/exit.c:947
 do_group_exit+0x21c/0x2d0 kernel/exit.c:1100
 get_signal+0x1286/0x1340 kernel/signal.c:3034
 arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x75/0x110 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:208 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9281f8e9e3
RSP: 002b:00007ffe6a051cb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: fffffffffffffffc RBX: 00007f92819ff6c0 RCX: 00007f9281f8e9e3
RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe6a051e10
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
INFO: task syz.1.17:6053 blocked for more than 144 seconds.
      Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.17        state:D stack:26920 pid:6053  tgid:6053  ppid:6033   task_flags:0x40044c flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5351 [inline]
 __schedule+0x1737/0x4d30 kernel/sched/core.c:6954
 __schedule_loop kernel/sched/core.c:7036 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7051
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7108
 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1088
 __down_read_common kernel/locking/rwsem.c:1263 [inline]
 __down_read kernel/locking/rwsem.c:1276 [inline]
 down_read+0x98/0x2e0 kernel/locking/rwsem.c:1541
 mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 exit_mm+0xcc/0x2c0 kernel/exit.c:557
 do_exit+0x648/0x2300 kernel/exit.c:947
 do_group_exit+0x21c/0x2d0 kernel/exit.c:1100
 get_signal+0x1286/0x1340 kernel/signal.c:3034
 arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x75/0x110 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:208 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa770d8e9e3
RSP: 002b:00007fff8436a228 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: fffffffffffffffc RBX: 00007fa7707ff6c0 RCX: 00007fa770d8e9e3
RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000020022 R11: 0000000000000246 R12: 00007fff8436a380
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6770
3 locks held by kworker/u8:6/1313:
2 locks held by getty/5608:
 #0: ffff8880302760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222
1 lock held by syz.0.16/6030:
 #0: ffff8880299381e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880299381e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.0.16/6031:
1 lock held by syz.1.17/6053:
 #0: ffff88802993ace0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88802993ace0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.1.17/6054:
1 lock held by syz.2.18/6082:
 #0: ffff88807c0f37a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88807c0f37a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.2.18/6083:
1 lock held by syz.3.19/6105:
 #0: ffff88802993b7a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88802993b7a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.3.19/6106:
1 lock held by syz.4.20/6134:
 #0: ffff888030554d20 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888030554d20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.4.20/6135:
1 lock held by syz.5.21/6170:
 #0: ffff888031c84d20 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888031c84d20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.5.21/6171:
1 lock held by syz.6.22/6201:
 #0: ffff8880305557e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880305557e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
2 locks held by syz.6.22/6202:
1 lock held by syz.7.23/6232:
 #0: ffff8880252eb7a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880252eb7a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.7.23/6233:
3 locks held by syz-executor/6242:
 #0: ffffffff8f0c03e0 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8f0c03e0 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8f0c03e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 net/core/rtnetlink.c:570
 #1: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #1: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #1: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 net/core/rtnetlink.c:4056
 #2: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline]
 #2: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 kernel/rcu/tree_exp.h:967

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]
 watchdog+0xf93/0xfe0 kernel/hung_task.c:491
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 6233 Comm: syz.7.23 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:mt_external_lock include/linux/maple_tree.h:791 [inline]
RIP: 0010:mt_locked lib/maple_tree.c:793 [inline]
RIP: 0010:mt_slot lib/maple_tree.c:800 [inline]
RIP: 0010:mas_slot lib/maple_tree.c:833 [inline]
RIP: 0010:mas_validate_limits lib/maple_tree.c:7523 [inline]
RIP: 0010:mt_validate+0x1327/0x4380 lib/maple_tree.c:7609
Code: 41 89 c5 31 ff 89 c6 e8 57 d4 47 f6 45 85 ed 74 72 4d 8d 6f 40 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 0f 85 1e 04 00 00 45 8b 6d 00 b8 00 03 00 00 41 21 c5 bf 00
RSP: 0018:ffffc90004447280 EFLAGS: 00000a02
RAX: 0000000000000000 RBX: 000000000000000e RCX: dffffc0000000000
RDX: ffff88802eb1da00 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90004447450 R08: ffff88802eb1da00 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000000 R12: 000000000000000d
R13: ffff8880252eb640 R14: 0000000000000000 R15: ffff8880252eb600
FS:  00007f85c74936c0(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005628a774ea58 CR3: 000000007b56c000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 validate_mm+0xb6/0x4b0 mm/vma.c:651
 vma_link+0x366/0x450 mm/vma.c:1799
 copy_vma+0x70c/0x940 mm/vma.c:1880
 copy_vma_and_data mm/mremap.c:1184 [inline]
 move_vma+0x81f/0x1840 mm/mremap.c:1282
 mremap_to+0x6d6/0x7a0 mm/mremap.c:1406
 remap_move mm/mremap.c:1863 [inline]
 do_mremap mm/mremap.c:1906 [inline]
 __do_sys_mremap mm/mremap.c:1970 [inline]
 __se_sys_mremap+0xa0b/0xef0 mm/mremap.c:1938
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f85c658e9a9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f85c7493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
RAX: ffffffffffffffda RBX: 00007f85c67b5fa0 RCX: 00007f85c658e9a9
RDX: 0000000000002000 RSI: 0000000000002000 RDI: 00002000003c9000
RBP: 00007f85c6610d69 R08: 00002000001de000 R09: 0000000000000000
R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f85c67b5fa0 R15: 00007ffd6e63bfc8
 </TASK>

final repro crashed as (corrupted=false):
INFO: task syz.0.16:6030 blocked for more than 143 seconds.
      Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.16        state:D stack:26920 pid:6030  tgid:6030  ppid:5968   task_flags:0x40044c flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5351 [inline]
 __schedule+0x1737/0x4d30 kernel/sched/core.c:6954
 __schedule_loop kernel/sched/core.c:7036 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7051
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7108
 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1088
 __down_read_common kernel/locking/rwsem.c:1263 [inline]
 __down_read kernel/locking/rwsem.c:1276 [inline]
 down_read+0x98/0x2e0 kernel/locking/rwsem.c:1541
 mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 exit_mm+0xcc/0x2c0 kernel/exit.c:557
 do_exit+0x648/0x2300 kernel/exit.c:947
 do_group_exit+0x21c/0x2d0 kernel/exit.c:1100
 get_signal+0x1286/0x1340 kernel/signal.c:3034
 arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x75/0x110 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:208 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9281f8e9e3
RSP: 002b:00007ffe6a051cb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: fffffffffffffffc RBX: 00007f92819ff6c0 RCX: 00007f9281f8e9e3
RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe6a051e10
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>
INFO: task syz.1.17:6053 blocked for more than 144 seconds.
      Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.17        state:D stack:26920 pid:6053  tgid:6053  ppid:6033   task_flags:0x40044c flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5351 [inline]
 __schedule+0x1737/0x4d30 kernel/sched/core.c:6954
 __schedule_loop kernel/sched/core.c:7036 [inline]
 schedule+0x165/0x360 kernel/sched/core.c:7051
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7108
 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1088
 __down_read_common kernel/locking/rwsem.c:1263 [inline]
 __down_read kernel/locking/rwsem.c:1276 [inline]
 down_read+0x98/0x2e0 kernel/locking/rwsem.c:1541
 mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 exit_mm+0xcc/0x2c0 kernel/exit.c:557
 do_exit+0x648/0x2300 kernel/exit.c:947
 do_group_exit+0x21c/0x2d0 kernel/exit.c:1100
 get_signal+0x1286/0x1340 kernel/signal.c:3034
 arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x75/0x110 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:208 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa770d8e9e3
RSP: 002b:00007fff8436a228 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: fffffffffffffffc RBX: 00007fa7707ff6c0 RCX: 00007fa770d8e9e3
RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000020022 R11: 0000000000000246 R12: 00007fff8436a380
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/31:
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6770
3 locks held by kworker/u8:6/1313:
2 locks held by getty/5608:
 #0: ffff8880302760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222
1 lock held by syz.0.16/6030:
 #0: ffff8880299381e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880299381e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.0.16/6031:
1 lock held by syz.1.17/6053:
 #0: ffff88802993ace0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88802993ace0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.1.17/6054:
1 lock held by syz.2.18/6082:
 #0: ffff88807c0f37a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88807c0f37a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.2.18/6083:
1 lock held by syz.3.19/6105:
 #0: ffff88802993b7a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff88802993b7a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.3.19/6106:
1 lock held by syz.4.20/6134:
 #0: ffff888030554d20 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888030554d20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.4.20/6135:
1 lock held by syz.5.21/6170:
 #0: ffff888031c84d20 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff888031c84d20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.5.21/6171:
1 lock held by syz.6.22/6201:
 #0: ffff8880305557e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880305557e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
2 locks held by syz.6.22/6202:
1 lock held by syz.7.23/6232:
 #0: ffff8880252eb7a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline]
 #0: ffff8880252eb7a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557
1 lock held by syz.7.23/6233:
3 locks held by syz-executor/6242:
 #0: ffffffff8f0c03e0 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #0: ffffffff8f0c03e0 (&ops->srcu#2){.+.+}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #0: ffffffff8f0c03e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 net/core/rtnetlink.c:570
 #1: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #1: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #1: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 net/core/rtnetlink.c:4056
 #2: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline]
 #2: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 kernel/rcu/tree_exp.h:967

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]
 watchdog+0xf93/0xfe0 kernel/hung_task.c:491
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 6233 Comm: syz.7.23 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:mt_external_lock include/linux/maple_tree.h:791 [inline]
RIP: 0010:mt_locked lib/maple_tree.c:793 [inline]
RIP: 0010:mt_slot lib/maple_tree.c:800 [inline]
RIP: 0010:mas_slot lib/maple_tree.c:833 [inline]
RIP: 0010:mas_validate_limits lib/maple_tree.c:7523 [inline]
RIP: 0010:mt_validate+0x1327/0x4380 lib/maple_tree.c:7609
Code: 41 89 c5 31 ff 89 c6 e8 57 d4 47 f6 45 85 ed 74 72 4d 8d 6f 40 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 0f 85 1e 04 00 00 45 8b 6d 00 b8 00 03 00 00 41 21 c5 bf 00
RSP: 0018:ffffc90004447280 EFLAGS: 00000a02
RAX: 0000000000000000 RBX: 000000000000000e RCX: dffffc0000000000
RDX: ffff88802eb1da00 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90004447450 R08: ffff88802eb1da00 R09: 0000000000000003
R10: 0000000000000003 R11: 0000000000000000 R12: 000000000000000d
R13: ffff8880252eb640 R14: 0000000000000000 R15: ffff8880252eb600
FS:  00007f85c74936c0(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005628a774ea58 CR3: 000000007b56c000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 validate_mm+0xb6/0x4b0 mm/vma.c:651
 vma_link+0x366/0x450 mm/vma.c:1799
 copy_vma+0x70c/0x940 mm/vma.c:1880
 copy_vma_and_data mm/mremap.c:1184 [inline]
 move_vma+0x81f/0x1840 mm/mremap.c:1282
 mremap_to+0x6d6/0x7a0 mm/mremap.c:1406
 remap_move mm/mremap.c:1863 [inline]
 do_mremap mm/mremap.c:1906 [inline]
 __do_sys_mremap mm/mremap.c:1970 [inline]
 __se_sys_mremap+0xa0b/0xef0 mm/mremap.c:1938
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f85c658e9a9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f85c7493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
RAX: ffffffffffffffda RBX: 00007f85c67b5fa0 RCX: 00007f85c658e9a9
RDX: 0000000000002000 RSI: 0000000000002000 RDI: 00002000003c9000
RBP: 00007f85c6610d69 R08: 00002000001de000 R09: 0000000000000000
R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007f85c67b5fa0 R15: 00007ffd6e63bfc8
 </TASK>