, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3075.766801]  warn_alloc.cold+0x7b/0x18f
[ 3075.766820]  ? zone_watermark_ok_safe+0x260/0x260
[ 3075.766838]  ? try_to_free_pages+0x2d7/0x7c0
[ 3075.774578] 82241 total pagecache pages
[ 3075.776866]  ? wait_for_completion_io+0x10/0x10
[ 3075.776892]  __alloc_pages_nodemask+0x232f/0x2890
[ 3075.776913]  ? debug_check_no_obj_freed+0x201/0x490
[ 3075.781735] 0 pages in swap cache
[ 3075.787617]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3075.787631]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3075.787651]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3075.796019] Swap cache stats: add 0, delete 0, find 0/0
[ 3075.799145]  alloc_new_node_page+0x2b6/0x400
[ 3075.799162]  migrate_pages+0x528/0x2fe0
[ 3075.799179]  ? mpol_set_nodemask+0x450/0x450
[ 3075.809371] Free swap  = 0kB
[ 3075.812174]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3075.826686] Total swap = 0kB
[ 3075.841567]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3075.841592]  kernel_move_pages+0xde2/0x1820
[ 3075.841615]  ? migrate_pages+0x2fe0/0x2fe0
[ 3075.841633]  ? __se_sys_futex+0x28f/0x3b0
[ 3075.876713] 2097051 pages RAM
[ 3075.884602]  ? __se_sys_futex+0x298/0x3b0
[ 3075.884622]  ? do_futex+0x1880/0x1880
[ 3075.884643]  __x64_sys_move_pages+0xdd/0x1b0
[ 3075.895092] 0 pages HighMem/MovableOnly
[ 3075.907411]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3075.907427]  do_syscall_64+0xf9/0x620
[ 3075.907446]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3075.907459] RIP: 0033:0x7fe0a8319e99
[ 3075.907477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3075.917819] 369649 pages reserved
[ 3075.921611] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3075.921625] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3075.921633] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3075.921644] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3075.925374] 0 pages cma reserved
[ 3075.934159] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3075.934167] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
15:30:51 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:51 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x20000000, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
r0 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="9ffd", 0x2}], 0x1)
r1 = syz_open_dev$vcsu(&(0x7f0000000380), 0x8, 0xa80)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x8000, r0, &(0x7f00000001c0)="5b422f6b8d6b255a3406c79b9924f786739b585f841ffbea43bce6724ecb6426643fae0573712b82a2f7b410d40cc1278a9548d39a7be2a037bea6ac70fc0c0739ad6b612e1e61f7bc2d5876560e91e524dfe53478bd3cf7471e43c4da6e588c7e3d127b259b98fe635e905ef064975c7218dd3b49cbc6b952c6eb6138b657021620899b2346fccc35423a0000ebb5d3901521ce84202fafd65c10e72decb70149fb930f", 0xa4, 0x2, 0x0, 0x1, r1}, &(0x7f00000002c0))
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="6e66644a5018"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:30:52 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3077.174128] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3077.224738] romfs: VFS: Can't find a romfs filesystem on dev loop4.
15:30:52 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:52 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:52 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:52 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:52 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>0x0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:53 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:53 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:53 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'})
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'N\x97\x96n'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:30:53 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:53 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3078.403187] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3078.433599] romfs: VFS: Can't find a romfs filesystem on dev loop4.
15:30:53 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:53 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:53 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:53 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:54 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>0x0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:54 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 64)
io_setup(0x6, &(0x7f0000000080)) (rerun: 64)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'N\x97\x96n'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async, rerun: 32)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async, rerun: 32)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:30:54 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:54 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'})
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'N\x97\x96n'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'N\x97\x96n'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

15:30:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3079.800463] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3079.819581] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3079.827053] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3079.889885] CPU: 0 PID: 27181 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3079.897841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3079.907206] Call Trace:
[ 3079.909812]  dump_stack+0x1fc/0x2ef
[ 3079.913454]  warn_alloc.cold+0x7b/0x18f
[ 3079.917449]  ? zone_watermark_ok_safe+0x260/0x260
[ 3079.922303]  ? try_to_free_pages+0x2d7/0x7c0
[ 3079.926884]  ? wait_for_completion_io+0x10/0x10
[ 3079.931583]  __alloc_pages_nodemask+0x232f/0x2890
[ 3079.936449]  ? debug_check_no_obj_freed+0x201/0x490
[ 3079.941487]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3079.946338]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3079.951457]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3079.956087]  alloc_new_node_page+0x2b6/0x400
[ 3079.960512]  migrate_pages+0x528/0x2fe0
[ 3079.964500]  ? mpol_set_nodemask+0x450/0x450
[ 3079.968930]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3079.974476]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3079.979857]  kernel_move_pages+0xde2/0x1820
[ 3079.984200]  ? migrate_pages+0x2fe0/0x2fe0
[ 3079.988444]  ? __se_sys_futex+0x28f/0x3b0
[ 3079.992594]  ? __se_sys_futex+0x298/0x3b0
[ 3079.996750]  ? do_futex+0x1880/0x1880
[ 3080.000563]  __x64_sys_move_pages+0xdd/0x1b0
[ 3080.004981]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3080.006539] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3080.009567]  do_syscall_64+0xf9/0x620
[ 3080.009588]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3080.009600] RIP: 0033:0x7f992dec9e99
[ 3080.009615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3080.009624] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3080.009638] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3080.009646] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3080.009654] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3080.009662] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3080.009671] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3080.081036] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3080.100605] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3080.100636] CPU: 1 PID: 27192 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3080.100645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3080.100650] Call Trace:
[ 3080.100670]  dump_stack+0x1fc/0x2ef
[ 3080.100688]  warn_alloc.cold+0x7b/0x18f
[ 3080.100708]  ? zone_watermark_ok_safe+0x260/0x260
[ 3080.100734]  ? wait_for_completion_io+0x10/0x10
[ 3080.100760]  __alloc_pages_nodemask+0x232f/0x2890
[ 3080.100783]  ? rcu_nmi_exit+0xb3/0x180
[ 3080.100808]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3080.100854]  alloc_new_node_page+0x2b6/0x400
[ 3080.100871]  migrate_pages+0x528/0x2fe0
[ 3080.100891]  ? mpol_set_nodemask+0x450/0x450
[ 3080.100915]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3080.100930]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3080.100957]  kernel_move_pages+0xde2/0x1820
[ 3080.100983]  ? migrate_pages+0x2fe0/0x2fe0
[ 3080.100998]  ? __se_sys_futex+0x28f/0x3b0
[ 3080.101012]  ? __se_sys_futex+0x298/0x3b0
[ 3080.101029]  ? do_futex+0x1880/0x1880
[ 3080.101052]  __x64_sys_move_pages+0xdd/0x1b0
[ 3080.101070]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3080.101085]  do_syscall_64+0xf9/0x620
[ 3080.101104]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3080.101116] RIP: 0033:0x7f12f54cce99
[ 3080.101130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3080.101137] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3080.101151] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3080.101160] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3080.101168] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3080.101176] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3080.101185] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3080.101212] warn_alloc_show_mem: 3 callbacks suppressed
[ 3080.101215] Mem-Info:
[ 3080.101247] active_anon:244878 inactive_anon:67444 isolated_anon:1429
[ 3080.101247]  active_file:4208 inactive_file:85020 isolated_file:0
[ 3080.101247]  unevictable:0 dirty:73 writeback:0 unstable:0
[ 3080.101247]  slab_reclaimable:136604 slab_unreclaimable:316454
[ 3080.101247]  mapped:75780 shmem:71879 pagetables:21843 bounce:0
[ 3080.101247]  free:464591 free_pcp:1011 free_cma:0
[ 3080.101275] Node 0 active_anon:823820kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3080.101303] Node 1 active_anon:155692kB inactive_anon:100268kB active_file:16828kB inactive_file:340076kB unevictable:0kB isolated(anon):5716kB isolated(file):0kB mapped:91428kB dirty:292kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3080.101308] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:136kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3080.101341] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3080.101361] Node 0 DMA32 free:35904kB min:35996kB low:44992kB high:53988kB active_anon:823684kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1524kB local_pcp:1044kB free_cma:0kB
[ 3080.101395] lowmem_reserve[]: 0 0 1 1 1
[ 3080.101422] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3080.101454] lowmem_reserve[]: 0 0 0 0 0
[ 3080.101473] Node 1 Normal free:1811484kB min:53876kB low:67344kB high:80812kB active_anon:155692kB inactive_anon:100268kB active_file:16828kB inactive_file:340076kB unevictable:0kB writepending:292kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:45056kB pagetables:74680kB bounce:0kB free_pcp:2520kB local_pcp:1296kB free_cma:0kB
[ 3080.101504] lowmem_reserve[]: 0 0 0 0 0
[ 3080.178259] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3080.197270] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3080.259455] CPU: 0 PID: 27174 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3080.370097] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3080.377965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3080.377972] Call Trace:
[ 3080.377992]  dump_stack+0x1fc/0x2ef
[ 3080.378010]  warn_alloc.cold+0x7b/0x18f
[ 3080.378027]  ? zone_watermark_ok_safe+0x260/0x260
[ 3080.378044]  ? try_to_free_pages+0x2d7/0x7c0
[ 3080.588819]  ? wait_for_completion_io+0x10/0x10
[ 3080.593499]  __alloc_pages_nodemask+0x232f/0x2890
[ 3080.598357]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3080.603222]  alloc_new_node_page+0x2b6/0x400
[ 3080.607642]  migrate_pages+0x528/0x2fe0
[ 3080.611613]  ? mpol_set_nodemask+0x450/0x450
[ 3080.616023]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3080.621559]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3080.626929]  kernel_move_pages+0xde2/0x1820
[ 3080.631277]  ? migrate_pages+0x2fe0/0x2fe0
[ 3080.635531]  ? retint_kernel+0x2d/0x2d
[ 3080.639523]  __x64_sys_move_pages+0xdd/0x1b0
[ 3080.644067]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3080.648661]  do_syscall_64+0xf9/0x620
[ 3080.652472]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3080.657667] RIP: 0033:0x7f6a683bfe99
[ 3080.661391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3080.680292] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3080.687996] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3080.695258] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3080.702517] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3080.709825] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3080.717088] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3080.724374] CPU: 1 PID: 27185 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3080.732270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
15:30:55 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:55 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3080.741751] Call Trace:
[ 3080.744363]  dump_stack+0x1fc/0x2ef
[ 3080.748017]  warn_alloc.cold+0x7b/0x18f
[ 3080.752019]  ? zone_watermark_ok_safe+0x260/0x260
[ 3080.756884]  ? try_to_free_pages+0x2d7/0x7c0
[ 3080.761322]  ? wait_for_completion_io+0x10/0x10
[ 3080.765865] Node 0 DMA: 6*4kB (UME) 26*8kB (UH) 7*16kB (UH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB
[ 3080.766014]  __alloc_pages_nodemask+0x232f/0x2890
[ 3080.766046]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3080.791318]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3080.796098]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3080.800871]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3080.805663]  alloc_new_node_page+0x2b6/0x400
[ 3080.810092]  migrate_pages+0x528/0x2fe0
[ 3080.814087]  ? mpol_set_nodemask+0x450/0x450
[ 3080.818287] Node 0 DMA32: 2110*4kB (UME) 1831*8kB (UME) 568*16kB (UME) 118*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35952kB
[ 3080.818519]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3080.837755]  ? lock_downgrade+0x720/0x720
[ 3080.841930]  ? lock_acquire+0x170/0x3c0
[ 3080.845919]  ? __might_fault+0xef/0x1d0
[ 3080.849919]  kernel_move_pages+0xde2/0x1820
[ 3080.854263]  ? migrate_pages+0x2fe0/0x2fe0
[ 3080.858509]  ? __se_sys_futex+0x28f/0x3b0
[ 3080.862669]  ? __se_sys_futex+0x298/0x3b0
[ 3080.866827] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 
[ 3080.866863]  ? do_futex+0x1880/0x1880
[ 3080.866866] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3080.872410]  __x64_sys_move_pages+0xdd/0x1b0
[ 3080.872431]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3080.872447]  do_syscall_64+0xf9/0x620
[ 3080.872465]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3080.872478] RIP: 0033:0x7f1e38c8fe99
[ 3080.886708] Node 1 Normal: 3626*4kB (ME) 2184*8kB (UME) 1909*16kB (UME) 2233*32kB (UME) 914*64kB (UME) 1472*128kB (M) 1041*256kB (M) 687*512kB (UME) 348*1024kB (UME) 2*2048kB (ME) 111*4096kB (M) = 1814232kB
[ 3080.887757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3080.887766] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3080.887781] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3080.887790] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3080.887799] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3080.887807] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3080.887815] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3080.902289] romfs: VFS: Can't find a romfs filesystem on dev loop4.
[ 3080.939097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3081.006256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3081.028518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3081.043027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3081.055237] 82276 total pagecache pages
[ 3081.064871] 0 pages in swap cache
[ 3081.071709] Swap cache stats: add 0, delete 0, find 0/0
[ 3081.082501] Free swap  = 0kB
[ 3081.086147] Total swap = 0kB
15:30:56 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3081.092624] 2097051 pages RAM
[ 3081.096240] 0 pages HighMem/MovableOnly
[ 3081.105457] 369649 pages reserved
[ 3081.112200] 0 pages cma reserved
[ 3081.134288] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3081.148155] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3081.153372] CPU: 1 PID: 27249 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3081.161264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3081.170630] Call Trace:
[ 3081.173238]  dump_stack+0x1fc/0x2ef
[ 3081.176884]  warn_alloc.cold+0x7b/0x18f
[ 3081.180880]  ? zone_watermark_ok_safe+0x260/0x260
[ 3081.185742]  ? try_to_free_pages+0x2d7/0x7c0
[ 3081.190178]  ? wait_for_completion_io+0x10/0x10
[ 3081.194872]  __alloc_pages_nodemask+0x232f/0x2890
[ 3081.199743]  ? debug_check_no_obj_freed+0x201/0x490
[ 3081.204783]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3081.209726]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3081.214848]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3081.219477]  alloc_new_node_page+0x2b6/0x400
[ 3081.223906]  migrate_pages+0x528/0x2fe0
[ 3081.227907]  ? mpol_set_nodemask+0x450/0x450
[ 3081.232343]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3081.237893]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3081.242507] warn_alloc_show_mem: 1 callbacks suppressed
[ 3081.242512] Mem-Info:
[ 3081.243269]  kernel_move_pages+0xde2/0x1820
[ 3081.252033] active_anon:245164 inactive_anon:67444 isolated_anon:700
[ 3081.252033]  active_file:4210 inactive_file:85033 isolated_file:0
[ 3081.252033]  unevictable:0 dirty:89 writeback:0 unstable:0
[ 3081.252033]  slab_reclaimable:136604 slab_unreclaimable:316361
[ 3081.252033]  mapped:75804 shmem:71879 pagetables:21844 bounce:0
[ 3081.252033]  free:465168 free_pcp:1117 free_cma:0
[ 3081.255326]  ? migrate_pages+0x2fe0/0x2fe0
[ 3081.255343]  ? __se_sys_futex+0x28f/0x3b0
[ 3081.255356]  ? __se_sys_futex+0x298/0x3b0
[ 3081.255394]  ? do_futex+0x1880/0x1880
[ 3081.297448] Node 0 active_anon:824836kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3081.298194]  __x64_sys_move_pages+0xdd/0x1b0
[ 3081.298215]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3081.298228]  do_syscall_64+0xf9/0x620
[ 3081.298246]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3081.302951] Node 1 active_anon:155820kB inactive_anon:100268kB active_file:16836kB inactive_file:340128kB unevictable:0kB isolated(anon):2800kB isolated(file):0kB mapped:91524kB dirty:356kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3081.306165] RIP: 0033:0x7f992dec9e99
15:30:56 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:56 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:56 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3081.306180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3081.306189] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3081.306203] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3081.306211] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3081.306224] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3081.343453] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:136kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3081.346803] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3081.346811] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3081.704682] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3081.711760] Node 0 DMA32 free:37968kB min:35996kB low:44992kB high:53988kB active_anon:821400kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:2424kB local_pcp:1036kB free_cma:0kB
[ 3081.769363] lowmem_reserve[]: 0 0 1 1 1
[ 3081.773445] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3081.801087] lowmem_reserve[]: 0 0 0 0 0
[ 3081.810860] Node 1 Normal free:1810992kB min:53876kB low:67344kB high:80812kB active_anon:156960kB inactive_anon:100268kB active_file:16836kB inactive_file:340128kB unevictable:0kB writepending:356kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:44960kB pagetables:74684kB bounce:0kB free_pcp:1732kB local_pcp:456kB free_cma:0kB
[ 3081.862253] lowmem_reserve[]: 0 0 0 0 0
[ 3081.867424] Node 0 DMA: 6*4kB (UME) 26*8kB (UH) 9*16kB (UMH) 1*32kB (H) 0*64kB 3*128kB (UM) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11032kB
[ 3081.890282] Node 0 DMA32: 2580*4kB (UME) 1813*8kB (UME) 578*16kB (ME) 127*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38136kB
[ 3081.910947] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3081.924597] Node 1 Normal: 3572*4kB (UME) 2170*8kB (UME) 1916*16kB (UME) 2232*32kB (UME) 914*64kB (UME) 1471*128kB (M) 1044*256kB (M) 691*512kB (UME) 349*1024kB (UME) 1*2048kB (E) 110*4096kB (M) = 1811552kB
[ 3081.963076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3082.067280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3082.146823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3082.155714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3082.165054] 82280 total pagecache pages
[ 3082.169133] 0 pages in swap cache
[ 3082.172594] Swap cache stats: add 0, delete 0, find 0/0
[ 3082.178106] Free swap  = 0kB
[ 3082.181126] Total swap = 0kB
[ 3082.184157] 2097051 pages RAM
[ 3082.187507] 0 pages HighMem/MovableOnly
[ 3082.191480] 369649 pages reserved
15:30:57 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:57 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40888)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:30:57 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:57 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3082.194929] 0 pages cma reserved
[ 3082.417868] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3082.429842] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3082.435059] CPU: 0 PID: 27260 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3082.442950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3082.452315] Call Trace:
[ 3082.455018]  dump_stack+0x1fc/0x2ef
[ 3082.458677]  warn_alloc.cold+0x7b/0x18f
[ 3082.462669]  ? zone_watermark_ok_safe+0x260/0x260
[ 3082.467529]  ? try_to_free_pages+0x2d7/0x7c0
[ 3082.471966]  ? wait_for_completion_io+0x10/0x10
[ 3082.476664]  __alloc_pages_nodemask+0x232f/0x2890
[ 3082.481534]  ? debug_check_no_obj_freed+0x201/0x490
[ 3082.486581]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3082.491444]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3082.496570]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3082.501194]  alloc_new_node_page+0x2b6/0x400
[ 3082.505623]  migrate_pages+0x528/0x2fe0
[ 3082.509626]  ? mpol_set_nodemask+0x450/0x450
[ 3082.514064]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3082.519623]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3082.525020]  kernel_move_pages+0xde2/0x1820
[ 3082.529373]  ? migrate_pages+0x2fe0/0x2fe0
[ 3082.533626]  ? __se_sys_futex+0x28f/0x3b0
[ 3082.537796]  ? __se_sys_futex+0x298/0x3b0
[ 3082.541970]  ? do_futex+0x1880/0x1880
[ 3082.545797]  __x64_sys_move_pages+0xdd/0x1b0
[ 3082.550227]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3082.554829]  do_syscall_64+0xf9/0x620
[ 3082.558653]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3082.563857] RIP: 0033:0x7f12f54cce99
[ 3082.567584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3082.586499] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3082.594229] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3082.601523] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3082.608813] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
15:30:57 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:57 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:57 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3082.616096] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3082.623382] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3082.664533] warn_alloc_show_mem: 2 callbacks suppressed
[ 3082.664539] Mem-Info:
[ 3082.679647] active_anon:245160 inactive_anon:67444 isolated_anon:149
[ 3082.679647]  active_file:4209 inactive_file:85037 isolated_file:0
[ 3082.679647]  unevictable:0 dirty:96 writeback:0 unstable:0
[ 3082.679647]  slab_reclaimable:136604 slab_unreclaimable:315947
[ 3082.679647]  mapped:75815 shmem:71879 pagetables:21844 bounce:0
[ 3082.679647]  free:466374 free_pcp:841 free_cma:0
15:30:57 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3082.715849] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3082.726486] Node 0 active_anon:822944kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3082.763149] romfs: VFS: Can't find a romfs filesystem on dev loop4.
[ 3082.999412] ieee802154 phy0 wpan0: encryption failed: -22
[ 3083.005118] ieee802154 phy1 wpan1: encryption failed: -22
15:30:58 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3083.032776] Node 1 active_anon:156344kB inactive_anon:100268kB active_file:16836kB inactive_file:340172kB unevictable:0kB isolated(anon):4620kB isolated(file):0kB mapped:92088kB dirty:416kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
15:30:58 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40888)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40888) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

[ 3083.336685] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:132kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3083.469845] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3083.532780] Node 0 DMA32 free:36560kB min:35996kB low:44992kB high:53988kB active_anon:824136kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:732kB local_pcp:280kB free_cma:0kB
[ 3083.588171] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3083.653748] romfs: VFS: Can't find a romfs filesystem on dev loop4.
[ 3083.672789] lowmem_reserve[]: 0 0 1 1 1
[ 3083.677539] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3083.705289] lowmem_reserve[]: 0 0 0 0 0
[ 3083.707924] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3083.723138] Node 1 Normal free:1814960kB min:53876kB low:67344kB high:80812kB active_anon:156844kB inactive_anon:100268kB active_file:16836kB inactive_file:340172kB unevictable:0kB writepending:416kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:45120kB pagetables:75068kB bounce:0kB free_pcp:2164kB local_pcp:756kB free_cma:0kB
[ 3083.764270] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3083.770732] CPU: 0 PID: 27295 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3083.778649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3083.785276] lowmem_reserve[]: 0 0 0 0 0
[ 3083.788007] Call Trace:
[ 3083.788030]  dump_stack+0x1fc/0x2ef
[ 3083.788049]  warn_alloc.cold+0x7b/0x18f
[ 3083.788068]  ? zone_watermark_ok_safe+0x260/0x260
[ 3083.788083]  ? try_to_free_pages+0x2d7/0x7c0
[ 3083.788108]  ? wait_for_completion_io+0x10/0x10
[ 3083.792773] Node 0 DMA: 5*4kB (UE) 27*8kB (UMH) 7*16kB (UH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3083.794672]  __alloc_pages_nodemask+0x232f/0x2890
[ 3083.794699]  ? debug_check_no_obj_freed+0x201/0x490
[ 3083.798953] Node 0 DMA32: 2235*4kB (UME) 1838*8kB (UME) 578*16kB (ME) 127*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36956kB
[ 3083.802291]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3083.802308]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3083.802326]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3083.802364]  alloc_new_node_page+0x2b6/0x400
[ 3083.802381]  migrate_pages+0x528/0x2fe0
[ 3083.802397]  ? mpol_set_nodemask+0x450/0x450
[ 3083.802423]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3083.802438]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3083.802462]  kernel_move_pages+0xde2/0x1820
[ 3083.802487]  ? migrate_pages+0x2fe0/0x2fe0
[ 3083.802502]  ? __se_sys_futex+0x28f/0x3b0
[ 3083.802515]  ? __se_sys_futex+0x298/0x3b0
[ 3083.802533]  ? do_futex+0x1880/0x1880
[ 3083.802556]  __x64_sys_move_pages+0xdd/0x1b0
[ 3083.802572]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3083.802586]  do_syscall_64+0xf9/0x620
[ 3083.802606]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3083.802618] RIP: 0033:0x7f6a683bfe99
[ 3083.802638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3083.802646] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3083.802658] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3083.802667] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3083.802675] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3083.802683] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3083.802692] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3083.835333] Mem-Info:
[ 3083.854294] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3084.017316] Node 1 Normal: 3588*4kB (UME) 1901*8kB (UME) 2006*16kB (UME) 2252*32kB (UME) 926*64kB (UME) 1476*128kB (M) 1049*256kB (M) 697*512kB (UME) 350*1024kB (UME) 1*2048kB (E) 109*4096kB (M) = 1814232kB
[ 3084.036384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3084.045315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3084.058062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3084.067421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3084.076070] 82293 total pagecache pages
[ 3084.080536] 0 pages in swap cache
[ 3084.084066] Swap cache stats: add 0, delete 0, find 0/0
[ 3084.089834] Free swap  = 0kB
[ 3084.092929] Total swap = 0kB
[ 3084.096005] 2097051 pages RAM
[ 3084.099596] 0 pages HighMem/MovableOnly
[ 3084.103642] 369649 pages reserved
[ 3084.108653] 0 pages cma reserved
15:30:59 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:59 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:59 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:59 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3084.123260] active_anon:244311 inactive_anon:67444 isolated_anon:474
[ 3084.123260]  active_file:4212 inactive_file:85046 isolated_file:0
[ 3084.123260]  unevictable:0 dirty:111 writeback:0 unstable:0
[ 3084.123260]  slab_reclaimable:136604 slab_unreclaimable:316056
[ 3084.123260]  mapped:75812 shmem:71879 pagetables:21827 bounce:0
[ 3084.123260]  free:466366 free_pcp:1359 free_cma:0
15:30:59 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40888) (async, rerun: 64)
io_setup(0x6, &(0x7f0000000080)) (rerun: 64)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async, rerun: 32)
exit(0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
io_setup(0xa, &(0x7f0000000080)) (async, rerun: 32)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (rerun: 64)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3084.177773] Node 0 active_anon:821544kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3084.244520] Node 1 active_anon:156100kB inactive_anon:100268kB active_file:16844kB inactive_file:340180kB unevictable:0kB isolated(anon):1896kB isolated(file):0kB mapped:91556kB dirty:444kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3084.513609] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:72kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
15:30:59 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:30:59 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:30:59 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3084.926352] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3084.931521] Node 0 DMA32 free:37524kB min:35996kB low:44992kB high:53988kB active_anon:825280kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:820kB local_pcp:180kB free_cma:0kB
[ 3084.937660] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3084.968311] romfs: VFS: Can't find a romfs filesystem on dev loop4.
[ 3084.975029] lowmem_reserve[]: 0 0 1 1 1
[ 3084.979525] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3085.146446] lowmem_reserve[]: 0 0 0 0 0
[ 3085.155492] Node 1 Normal free:1813796kB min:53876kB low:67344kB high:80812kB active_anon:156240kB inactive_anon:100268kB active_file:16844kB inactive_file:340204kB unevictable:0kB writepending:496kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:45056kB pagetables:74724kB bounce:0kB free_pcp:2748kB local_pcp:1376kB free_cma:0kB
[ 3085.189877] lowmem_reserve[]: 0 0 0 0 0
[ 3085.194579] Node 0 DMA: 6*4kB (UME) 26*8kB (UH) 9*16kB (UMH) 1*32kB (H) 0*64kB 3*128kB (UM) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11032kB
[ 3085.212512] Node 0 DMA32: 2361*4kB (UME) 2075*8kB (UME) 599*16kB (UME) 131*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39820kB
[ 3085.228815] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3085.241391] Node 1 Normal: 3706*4kB (UME) 2023*8kB (UME) 1959*16kB (UME) 2253*32kB (UME) 933*64kB (UME) 1482*128kB (M) 1052*256kB (M) 698*512kB (UME) 351*1024kB (UME) 1*2048kB (E) 108*4096kB (M) = 1814384kB
[ 3085.261533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3085.271631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3085.281534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
15:31:00 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:00 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:00 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:00 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3085.291535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3085.301520] 82296 total pagecache pages
[ 3085.305918] 0 pages in swap cache
[ 3085.310813] Swap cache stats: add 0, delete 0, find 0/0
[ 3085.317257] Free swap  = 0kB
[ 3085.321321] Total swap = 0kB
[ 3085.324661] 2097051 pages RAM
[ 3085.329943] 0 pages HighMem/MovableOnly
[ 3085.334139] 369649 pages reserved
[ 3085.338911] 0 pages cma reserved
15:31:00 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) (async)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

15:31:00 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:01 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:01 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:01 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:01 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3086.545445] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3086.561357] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3086.575308] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3086.592146] CPU: 1 PID: 27393 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3086.600059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3086.609419] Call Trace:
[ 3086.612016]  dump_stack+0x1fc/0x2ef
[ 3086.613340] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3086.615651]  warn_alloc.cold+0x7b/0x18f
[ 3086.624719]  ? zone_watermark_ok_safe+0x260/0x260
[ 3086.629571]  ? try_to_free_pages+0x2d7/0x7c0
[ 3086.634010]  ? wait_for_completion_io+0x10/0x10
[ 3086.638699]  __alloc_pages_nodemask+0x232f/0x2890
[ 3086.643548]  ? debug_check_no_obj_freed+0x201/0x490
[ 3086.648575]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3086.653424]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3086.658531]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3086.663143]  alloc_new_node_page+0x2b6/0x400
[ 3086.667562]  migrate_pages+0x528/0x2fe0
[ 3086.671552]  ? mpol_set_nodemask+0x450/0x450
[ 3086.675991]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3086.681539]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3086.686928]  kernel_move_pages+0xde2/0x1820
[ 3086.691276]  ? migrate_pages+0x2fe0/0x2fe0
[ 3086.695518]  ? __se_sys_futex+0x28f/0x3b0
[ 3086.699683]  ? __se_sys_futex+0x298/0x3b0
[ 3086.703840]  ? do_futex+0x1880/0x1880
[ 3086.707656]  __x64_sys_move_pages+0xdd/0x1b0
[ 3086.712080]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3086.716671]  do_syscall_64+0xf9/0x620
[ 3086.720488]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3086.725680] RIP: 0033:0x7f12f54cce99
[ 3086.729402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3086.748310] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3086.756032] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3086.763303] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3086.770578] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3086.777853] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3086.785131] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3086.792518] CPU: 0 PID: 27394 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3086.800418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3086.809773] Call Trace:
[ 3086.812374]  dump_stack+0x1fc/0x2ef
[ 3086.816021]  warn_alloc.cold+0x7b/0x18f
[ 3086.820012]  ? zone_watermark_ok_safe+0x260/0x260
[ 3086.824864]  ? try_to_free_pages+0x2d7/0x7c0
[ 3086.829294]  ? wait_for_completion_io+0x10/0x10
[ 3086.833986]  __alloc_pages_nodemask+0x232f/0x2890
[ 3086.838854]  ? debug_check_no_obj_freed+0x201/0x490
[ 3086.843895]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3086.848757]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3086.853888]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3086.858511]  alloc_new_node_page+0x2b6/0x400
[ 3086.862944]  migrate_pages+0x528/0x2fe0
[ 3086.866934]  ? mpol_set_nodemask+0x450/0x450
[ 3086.871371]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3086.876918]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3086.882308]  kernel_move_pages+0xde2/0x1820
[ 3086.886664]  ? migrate_pages+0x2fe0/0x2fe0
[ 3086.890910]  ? __se_sys_futex+0x28f/0x3b0
[ 3086.895068]  ? __se_sys_futex+0x298/0x3b0
[ 3086.899231]  ? do_futex+0x1880/0x1880
[ 3086.903138]  __x64_sys_move_pages+0xdd/0x1b0
[ 3086.907649]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3086.912247]  do_syscall_64+0xf9/0x620
[ 3086.916064]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3086.921263] RIP: 0033:0x7f1e38c8fe99
[ 3086.924985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
15:31:02 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3086.943895] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3086.951616] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3086.958981] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3086.966261] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3086.973544] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3086.980831] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3087.231085] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3087.239438] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3087.243144] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3087.260237] CPU: 0 PID: 27439 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3087.268125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3087.277479] Call Trace:
[ 3087.280079]  dump_stack+0x1fc/0x2ef
[ 3087.283723]  warn_alloc.cold+0x7b/0x18f
[ 3087.287717]  ? zone_watermark_ok_safe+0x260/0x260
[ 3087.292571]  ? try_to_free_pages+0x2d7/0x7c0
[ 3087.297003]  ? wait_for_completion_io+0x10/0x10
[ 3087.301693]  __alloc_pages_nodemask+0x232f/0x2890
[ 3087.306550]  ? rcu_nmi_exit+0xb3/0x180
[ 3087.310463]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3087.315319]  ? _raw_spin_unlock_irqrestore+0xa3/0xe0
[ 3087.320467]  alloc_new_node_page+0x2b6/0x400
[ 3087.324886]  migrate_pages+0x528/0x2fe0
[ 3087.328875]  ? mpol_set_nodemask+0x450/0x450
[ 3087.333302]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3087.338852]  ? retint_kernel+0x2d/0x2d
[ 3087.342750]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3087.348118] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3087.348207]  ? kernel_move_pages+0xd7d/0x1820
[ 3087.357790]  kernel_move_pages+0xde2/0x1820
[ 3087.362133]  ? migrate_pages+0x2fe0/0x2fe0
[ 3087.366379]  ? __se_sys_futex+0x28f/0x3b0
[ 3087.370541]  ? __se_sys_futex+0x298/0x3b0
[ 3087.374700]  ? do_futex+0x1880/0x1880
[ 3087.378518]  __x64_sys_move_pages+0xdd/0x1b0
[ 3087.382940]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3087.387621]  do_syscall_64+0xf9/0x620
[ 3087.391445]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3087.396637] RIP: 0033:0x7f992dec9e99
[ 3087.400352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3087.419260] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3087.426975] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3087.434264] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3087.441542] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3087.448908] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3087.456188] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3087.463483] CPU: 1 PID: 27438 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3087.467723] Mem-Info:
[ 3087.471371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3087.471377] Call Trace:
[ 3087.471399]  dump_stack+0x1fc/0x2ef
[ 3087.471418]  warn_alloc.cold+0x7b/0x18f
[ 3087.471437]  ? zone_watermark_ok_safe+0x260/0x260
[ 3087.471451]  ? try_to_free_pages+0x2d7/0x7c0
[ 3087.471477]  ? wait_for_completion_io+0x10/0x10
[ 3087.471502]  __alloc_pages_nodemask+0x232f/0x2890
[ 3087.471525]  ? debug_check_no_obj_freed+0x201/0x490
[ 3087.471552]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3087.471567]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3087.471586]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3087.471627]  alloc_new_node_page+0x2b6/0x400
[ 3087.471643]  migrate_pages+0x528/0x2fe0
[ 3087.471662]  ? mpol_set_nodemask+0x450/0x450
[ 3087.471688]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3087.471705]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3087.471732]  kernel_move_pages+0xde2/0x1820
[ 3087.471756]  ? migrate_pages+0x2fe0/0x2fe0
[ 3087.471771]  ? __se_sys_futex+0x28f/0x3b0
[ 3087.471785]  ? __se_sys_futex+0x298/0x3b0
[ 3087.471803]  ? do_futex+0x1880/0x1880
[ 3087.471826]  __x64_sys_move_pages+0xdd/0x1b0
[ 3087.471844]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3087.471859]  do_syscall_64+0xf9/0x620
[ 3087.471879]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3087.471897] RIP: 0033:0x7f6a683bfe99
[ 3087.471912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3087.471920] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3087.471934] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3087.471943] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3087.471951] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3087.471959] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3087.471966] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3087.667263] active_anon:245133 inactive_anon:67445 isolated_anon:254
[ 3087.667263]  active_file:4214 inactive_file:85054 isolated_file:0
[ 3087.667263]  unevictable:0 dirty:136 writeback:0 unstable:0
[ 3087.667263]  slab_reclaimable:136646 slab_unreclaimable:316178
[ 3087.667263]  mapped:75841 shmem:71879 pagetables:21842 bounce:0
[ 3087.667263]  free:465887 free_pcp:939 free_cma:0
[ 3087.703442] Node 0 active_anon:822520kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3087.732063] Node 1 active_anon:156112kB inactive_anon:100272kB active_file:16852kB inactive_file:340212kB unevictable:0kB isolated(anon):1016kB isolated(file):0kB mapped:92172kB dirty:544kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3087.761390] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:128kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3087.788920] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3087.794326] Node 0 DMA32 free:37736kB min:35996kB low:44992kB high:53988kB active_anon:822392kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1868kB local_pcp:452kB free_cma:0kB
[ 3087.823637] lowmem_reserve[]: 0 0 1 1 1
[ 3087.827736] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3087.853750] lowmem_reserve[]: 0 0 0 0 0
[ 3087.857842] Node 1 Normal free:1818316kB min:53876kB low:67344kB high:80812kB active_anon:156012kB inactive_anon:100272kB active_file:16852kB inactive_file:340212kB unevictable:0kB writepending:544kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:44896kB pagetables:74676kB bounce:0kB free_pcp:1860kB local_pcp:504kB free_cma:0kB
[ 3087.889361] lowmem_reserve[]: 0 0 0 0 0
[ 3087.893369] Node 0 DMA: 6*4kB (UME) 27*8kB (UMH) 7*16kB (UH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10976kB
[ 3087.909712] Node 0 DMA32: 2132*4kB (UM) 1981*8kB (UME) 620*16kB (UME) 109*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37784kB
[ 3087.923563] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3087.934720] Node 1 Normal: 3739*4kB (UME) 2299*8kB (UME) 1961*16kB (UME) 2282*32kB (UME) 948*64kB (UME) 1495*128kB (M) 1063*256kB (M) 704*512kB (UME) 353*1024kB (UME) 2*2048kB (ME) 105*4096kB (M) = 1818004kB
[ 3087.953491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3087.962750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3087.971427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
15:31:03 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:03 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="23846bb5e7f6c4cdda2c00"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180), 0x0, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:03 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:03 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:03 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3087.980366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3087.990141] 82312 total pagecache pages
[ 3087.994130] 0 pages in swap cache
[ 3087.998222] Swap cache stats: add 0, delete 0, find 0/0
[ 3088.003592] Free swap  = 0kB
[ 3088.006697] Total swap = 0kB
[ 3088.009715] 2097051 pages RAM
[ 3088.012800] 0 pages HighMem/MovableOnly
[ 3088.016861] 369649 pages reserved
[ 3088.020306] 0 pages cma reserved
[ 3088.303917] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3088.367795] romfs: VFS: Can't find a romfs filesystem on dev loop4.
15:31:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180), 0x0, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:03 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:03 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x0, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:04 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180), 0x0, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3088.949020] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3088.977097] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
15:31:04 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="23846bb5e7f6c4cdda2c00"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="23846bb5e7f6c4cdda2c00"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

[ 3088.993451] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3089.013620] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3089.050135] CPU: 1 PID: 27481 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3089.058055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3089.067416] Call Trace:
[ 3089.070012]  dump_stack+0x1fc/0x2ef
[ 3089.073652]  warn_alloc.cold+0x7b/0x18f
[ 3089.077645]  ? zone_watermark_ok_safe+0x260/0x260
[ 3089.080101] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3089.082496]  ? try_to_free_pages+0x2d7/0x7c0
[ 3089.082525]  ? wait_for_completion_io+0x10/0x10
[ 3089.082548]  __alloc_pages_nodemask+0x232f/0x2890
[ 3089.101554]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3089.106446]  alloc_new_node_page+0x2b6/0x400
[ 3089.110873]  migrate_pages+0x528/0x2fe0
[ 3089.114870]  ? mpol_set_nodemask+0x450/0x450
[ 3089.119308]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3089.124946]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3089.130332]  kernel_move_pages+0xde2/0x1820
[ 3089.134666]  ? migrate_pages+0x2fe0/0x2fe0
[ 3089.138905]  ? __se_sys_futex+0x28f/0x3b0
[ 3089.143150]  ? __se_sys_futex+0x298/0x3b0
[ 3089.147346]  ? do_futex+0x1880/0x1880
[ 3089.151164]  __x64_sys_move_pages+0xdd/0x1b0
[ 3089.155584]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3089.160175]  do_syscall_64+0xf9/0x620
[ 3089.163990]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3089.169185] RIP: 0033:0x7f6a683bfe99
[ 3089.172906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3089.191810] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3089.193204] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3089.199545] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3089.199555] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3089.199564] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3089.199573] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3089.199582] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3089.211367] CPU: 1 PID: 27503 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3089.249007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3089.258371] Call Trace:
[ 3089.260977]  dump_stack+0x1fc/0x2ef
[ 3089.264620]  warn_alloc.cold+0x7b/0x18f
[ 3089.268607]  ? zone_watermark_ok_safe+0x260/0x260
[ 3089.273455]  ? try_to_free_pages+0x2d7/0x7c0
[ 3089.277883]  ? wait_for_completion_io+0x10/0x10
[ 3089.282561]  __alloc_pages_nodemask+0x232f/0x2890
[ 3089.287415]  ? debug_check_no_obj_freed+0x201/0x490
[ 3089.292443]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3089.297299]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3089.302413]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3089.307036]  alloc_new_node_page+0x2b6/0x400
[ 3089.311455]  migrate_pages+0x528/0x2fe0
[ 3089.315445]  ? mpol_set_nodemask+0x450/0x450
[ 3089.319874]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3089.325423]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3089.330811]  kernel_move_pages+0xde2/0x1820
[ 3089.335152]  ? migrate_pages+0x2fe0/0x2fe0
[ 3089.339392]  ? __se_sys_futex+0x28f/0x3b0
[ 3089.343544]  ? __se_sys_futex+0x298/0x3b0
[ 3089.347706]  ? do_futex+0x1880/0x1880
[ 3089.351527]  __x64_sys_move_pages+0xdd/0x1b0
[ 3089.355950]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3089.360546]  do_syscall_64+0xf9/0x620
[ 3089.364366]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3089.369675] RIP: 0033:0x7f992dec9e99
[ 3089.373405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3089.392325] RSP: 002b:00007f992c81e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3089.400139] RAX: ffffffffffffffda RBX: 00007f992dfdd030 RCX: 00007f992dec9e99
[ 3089.407422] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3089.414706] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3089.421979] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3089.429256] R13: 00007ffd11dfe34f R14: 00007f992c81e300 R15: 0000000000022000
[ 3089.446047] CPU: 0 PID: 27476 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3089.453949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3089.463316] Call Trace:
[ 3089.465906]  dump_stack+0x1fc/0x2ef
[ 3089.469536]  warn_alloc.cold+0x7b/0x18f
[ 3089.473506]  ? zone_watermark_ok_safe+0x260/0x260
[ 3089.478342]  ? try_to_free_pages+0x2d7/0x7c0
[ 3089.482755]  ? wait_for_completion_io+0x10/0x10
[ 3089.487430]  __alloc_pages_nodemask+0x232f/0x2890
[ 3089.492285]  ? rcu_nmi_exit+0xb3/0x180
[ 3089.496278]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3089.501310]  ? _raw_spin_unlock_irqrestore+0xa3/0xe0
[ 3089.506456]  alloc_new_node_page+0x2b6/0x400
[ 3089.510884]  migrate_pages+0x528/0x2fe0
[ 3089.514863]  ? mpol_set_nodemask+0x450/0x450
[ 3089.519294]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3089.524842]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3089.530213]  kernel_move_pages+0xde2/0x1820
[ 3089.534558]  ? migrate_pages+0x2fe0/0x2fe0
[ 3089.538795]  ? __se_sys_futex+0x28f/0x3b0
[ 3089.542938]  ? __se_sys_futex+0x298/0x3b0
[ 3089.547094]  ? do_futex+0x1880/0x1880
[ 3089.550896]  __x64_sys_move_pages+0xdd/0x1b0
[ 3089.555383]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3089.559981]  do_syscall_64+0xf9/0x620
[ 3089.563789]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3089.568972] RIP: 0033:0x7f12f54cce99
[ 3089.573027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3089.591932] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3089.599638] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3089.606898] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3089.614324] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3089.621711] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3089.628989] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3089.657407] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3089.682236] romfs: VFS: Can't find a romfs filesystem on dev loop4.
[ 3089.751085] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3089.764547] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3089.770489] CPU: 0 PID: 27504 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3089.773859] warn_alloc_show_mem: 3 callbacks suppressed
[ 3089.773864] Mem-Info:
[ 3089.778386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3089.778393] Call Trace:
[ 3089.778416]  dump_stack+0x1fc/0x2ef
[ 3089.778436]  warn_alloc.cold+0x7b/0x18f
[ 3089.778454]  ? zone_watermark_ok_safe+0x260/0x260
[ 3089.778468]  ? try_to_free_pages+0x2d7/0x7c0
[ 3089.778493]  ? wait_for_completion_io+0x10/0x10
[ 3089.778516]  __alloc_pages_nodemask+0x232f/0x2890
[ 3089.778538]  ? debug_check_no_obj_freed+0x201/0x490
[ 3089.778561]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3089.790139] active_anon:245718 inactive_anon:67444 isolated_anon:786
[ 3089.790139]  active_file:4215 inactive_file:85068 isolated_file:0
[ 3089.790139]  unevictable:0 dirty:168 writeback:0 unstable:0
[ 3089.790139]  slab_reclaimable:136664 slab_unreclaimable:315915
[ 3089.790139]  mapped:75850 shmem:71879 pagetables:21924 bounce:0
[ 3089.790139]  free:464700 free_pcp:1053 free_cma:0
[ 3089.795667]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3089.795689]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3089.795726]  alloc_new_node_page+0x2b6/0x400
[ 3089.800850] Node 0 active_anon:826360kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3089.801917]  migrate_pages+0x528/0x2fe0
[ 3089.801938]  ? mpol_set_nodemask+0x450/0x450
[ 3089.801961]  ? migrate_huge_page_move_mapping+0x810/0x810
15:31:05 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:05 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:05 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x0, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:05 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{0x0}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3089.808545] Node 1 active_anon:156512kB inactive_anon:100268kB active_file:16856kB inactive_file:340268kB unevictable:0kB isolated(anon):3144kB isolated(file):0kB mapped:91708kB dirty:672kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3089.810759]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3089.810787]  kernel_move_pages+0xde2/0x1820
[ 3089.810809]  ? migrate_pages+0x2fe0/0x2fe0
[ 3089.815514] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:136kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3089.819865]  ? retint_kernel+0x2d/0x2d
[ 3089.819888]  __x64_sys_move_pages+0xdd/0x1b0
[ 3089.819904]  ? do_syscall_64+0xd6/0x620
[ 3089.819920]  do_syscall_64+0xf9/0x620
[ 3089.819937]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3089.819951] RIP: 0033:0x7f1e38c8fe99
[ 3089.827133] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3089.829787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3089.829795] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3089.829810] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3089.829817] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3089.829828] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3089.838461] Node 0 DMA32 free:35872kB min:35996kB low:44992kB high:53988kB active_anon:826284kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1252kB local_pcp:732kB free_cma:0kB
[ 3089.869210] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3089.869219] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3090.119916] lowmem_reserve[]: 0 0 1 1 1
[ 3090.123915] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3090.150536] lowmem_reserve[]: 0 0 0 0 0
[ 3090.154545] Node 1 Normal free:1814380kB min:53876kB low:67344kB high:80812kB active_anon:156156kB inactive_anon:100268kB active_file:16860kB inactive_file:340316kB unevictable:0kB writepending:724kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:45056kB pagetables:74828kB bounce:0kB free_pcp:2752kB local_pcp:1464kB free_cma:0kB
[ 3090.185613] lowmem_reserve[]: 0 0 0 0 0
[ 3090.190455] Node 0 DMA: 6*4kB (UME) 27*8kB (UMH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10992kB
[ 3090.242135] Node 0 DMA32: 2061*4kB (UME) 2026*8kB (UME) 673*16kB (UME) 124*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39252kB
[ 3090.430536] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3090.536326] Node 1 Normal: 3733*4kB (ME) 2071*8kB (UME) 2045*16kB (UME) 2278*32kB (UME) 953*64kB (UME) 1499*128kB (M) 1062*256kB (M) 709*512kB (UME) 357*1024kB (UME) 1*2048kB (E) 102*4096kB (M) = 1810268kB
[ 3090.571419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3090.647736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3090.743431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3090.822607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3090.833511] 82328 total pagecache pages
[ 3090.894975] 0 pages in swap cache
[ 3090.912602] Swap cache stats: add 0, delete 0, find 0/0
[ 3090.939020] Free swap  = 0kB
[ 3090.952472] Total swap = 0kB
[ 3090.973490] 2097051 pages RAM
15:31:06 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:06 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="23846bb5e7f6c4cdda2c00"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="23846bb5e7f6c4cdda2c00"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

15:31:06 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{0x0}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:06 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3091.006805] 0 pages HighMem/MovableOnly
[ 3091.020383] 369649 pages reserved
[ 3091.028237] 0 pages cma reserved
[ 3091.362642] MTD: Attempt to mount non-MTD device "/dev/loop4"
15:31:06 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3091.505005] romfs: VFS: Can't find a romfs filesystem on dev loop4.
15:31:06 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{0x0}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:06 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000180), 0x6)
io_setup(0xa, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x40000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0503ffff", 0x4}])
io_getevents(r1, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:07 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x0, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:07 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:07 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:07 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3092.560909] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3092.706883] romfs: VFS: Can't find a romfs filesystem on dev loop4.
15:31:07 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:08 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000180), 0x6)
io_setup(0xa, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x40000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0503ffff", 0x4}])
io_getevents(r1, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r0, &(0x7f0000000180), 0x6) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x40000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0503ffff", 0x4}]) (async)
io_getevents(r1, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

15:31:08 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:08 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x0, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:08 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3093.265255] MTD: Attempt to mount non-MTD device "/dev/loop4"
15:31:08 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3093.370725] romfs: VFS: Can't find a romfs filesystem on dev loop4.
15:31:08 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:08 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:08 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000180), 0x6)
io_setup(0xa, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x40000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0503ffff", 0x4}])
io_getevents(r1, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r0, &(0x7f0000000180), 0x6) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x40000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0503ffff", 0x4}]) (async)
io_getevents(r1, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

15:31:09 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:09 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x0, &(0x7f0000000200), &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:09 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0], 0x0)

15:31:09 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x0, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3094.338300] MTD: Attempt to mount non-MTD device "/dev/loop4"
15:31:09 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3094.502422] romfs: VFS: Can't find a romfs filesystem on dev loop4.
15:31:09 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0], 0x0)

15:31:09 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x916d, 0x0, 0x20000000}, 0x0, 0x2000000, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="122f882abbd8653f047d4c192e12eb1ad15ae7602bf91ea63001b874a6"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:10 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:10 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0], 0x0)

15:31:10 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], 0x0, &(0x7f0000000140)=[0x0], 0x0)

15:31:10 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:10 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>0x0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3095.238293] MTD: Attempt to mount non-MTD device "/dev/loop4"
15:31:10 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0)

[ 3095.293638] romfs: VFS: Can't find a romfs filesystem on dev loop4.
15:31:10 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x0, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:10 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x0, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:10 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>0x0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:11 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x916d, 0x0, 0x20000000}, 0x0, 0x2000000, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="122f882abbd8653f047d4c192e12eb1ad15ae7602bf91ea63001b874a6"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:11 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3096.339465] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3096.434572] romfs: VFS: Can't find a romfs filesystem on dev loop4.
15:31:11 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), 0x0, 0x0)

15:31:11 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:11 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x0, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:12 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x916d, 0x0, 0x20000000}, 0x0, 0x2000000, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="122f882abbd8653f047d4c192e12eb1ad15ae7602bf91ea63001b874a6"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3097.150546] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3097.169420] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3097.175072] CPU: 0 PID: 27810 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3097.183059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3097.184817] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3097.192407] Call Trace:
[ 3097.192429]  dump_stack+0x1fc/0x2ef
[ 3097.192451]  warn_alloc.cold+0x7b/0x18f
[ 3097.192471]  ? zone_watermark_ok_safe+0x260/0x260
[ 3097.192485]  ? try_to_free_pages+0x2d7/0x7c0
[ 3097.192510]  ? wait_for_completion_io+0x10/0x10
[ 3097.192534]  __alloc_pages_nodemask+0x232f/0x2890
[ 3097.233191]  ? __schedule+0x88f/0x2040
[ 3097.237100]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3097.241949]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3097.246546]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3097.251329]  ? retint_kernel+0x2d/0x2d
[ 3097.255245]  alloc_new_node_page+0x2b6/0x400
[ 3097.259671]  migrate_pages+0x528/0x2fe0
[ 3097.263655]  ? mpol_set_nodemask+0x450/0x450
[ 3097.268078]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3097.273621]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3097.278996]  kernel_move_pages+0xde2/0x1820
[ 3097.283336]  ? migrate_pages+0x2fe0/0x2fe0
[ 3097.287590]  ? __se_sys_futex+0x28f/0x3b0
[ 3097.291834]  ? __se_sys_futex+0x298/0x3b0
[ 3097.295998]  ? do_futex+0x1880/0x1880
[ 3097.299818]  __x64_sys_move_pages+0xdd/0x1b0
[ 3097.304238]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3097.308827]  do_syscall_64+0xf9/0x620
[ 3097.312638]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3097.317831] RIP: 0033:0x7f12f54cce99
[ 3097.321552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3097.340462] RSP: 002b:00007f12f3e21168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3097.348182] RAX: ffffffffffffffda RBX: 00007f12f55e0030 RCX: 00007f12f54cce99
[ 3097.352546] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3097.355457] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3097.355466] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3097.355475] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3097.355485] R13: 00007ffdb64c147f R14: 00007f12f3e21300 R15: 0000000000022000
[ 3097.372454] warn_alloc_show_mem: 3 callbacks suppressed
[ 3097.372459] Mem-Info:
[ 3097.488887] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3097.510181] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3097.515649] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3097.526018] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3097.528383] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3097.542680] CPU: 1 PID: 27796 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3097.557614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3097.566981] Call Trace:
[ 3097.569576]  dump_stack+0x1fc/0x2ef
[ 3097.573370]  warn_alloc.cold+0x7b/0x18f
[ 3097.577361]  ? zone_watermark_ok_safe+0x260/0x260
[ 3097.582213]  ? try_to_free_pages+0x2d7/0x7c0
[ 3097.586639]  ? wait_for_completion_io+0x10/0x10
[ 3097.591328]  __alloc_pages_nodemask+0x232f/0x2890
[ 3097.593021] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3097.596448]  ? debug_check_no_obj_freed+0x201/0x490
[ 3097.596475]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3097.596489]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3097.596506]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3097.596543]  alloc_new_node_page+0x2b6/0x400
[ 3097.596559]  migrate_pages+0x528/0x2fe0
[ 3097.596582]  ? mpol_set_nodemask+0x450/0x450
[ 3097.634080]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3097.639635]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3097.641614] active_anon:245740 inactive_anon:67444 isolated_anon:1444
[ 3097.641614]  active_file:4222 inactive_file:85083 isolated_file:0
[ 3097.641614]  unevictable:0 dirty:206 writeback:0 unstable:0
[ 3097.641614]  slab_reclaimable:136737 slab_unreclaimable:316345
[ 3097.641614]  mapped:75865 shmem:71879 pagetables:22067 bounce:0
[ 3097.641614]  free:463401 free_pcp:825 free_cma:0
[ 3097.645016]  kernel_move_pages+0xde2/0x1820
[ 3097.645064]  ? migrate_pages+0x2fe0/0x2fe0
[ 3097.688150]  ? __se_sys_futex+0x28f/0x3b0
[ 3097.691947] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 3097.692307]  ? __se_sys_futex+0x298/0x3b0
[ 3097.701549]  ? do_futex+0x1880/0x1880
[ 3097.705386]  __x64_sys_move_pages+0xdd/0x1b0
[ 3097.706415] romfs: VFS: Can't find a romfs filesystem on dev loop4.
[ 3097.709808]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3097.709825]  do_syscall_64+0xf9/0x620
[ 3097.709845]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3097.709857] RIP: 0033:0x7f1e38c8fe99
[ 3097.709869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3097.709877] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3097.709890] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3097.709898] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3097.709906] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3097.709912] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3097.709920] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3097.710868] CPU: 1 PID: 27804 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3097.804978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3097.814323] Call Trace:
[ 3097.816908]  dump_stack+0x1fc/0x2ef
[ 3097.820533]  warn_alloc.cold+0x7b/0x18f
[ 3097.824590]  ? zone_watermark_ok_safe+0x260/0x260
[ 3097.829424]  ? try_to_free_pages+0x2d7/0x7c0
[ 3097.833834]  ? wait_for_completion_io+0x10/0x10
[ 3097.838503]  __alloc_pages_nodemask+0x232f/0x2890
[ 3097.843344]  ? debug_check_no_obj_freed+0x201/0x490
[ 3097.848380]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3097.853218]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3097.858333]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3097.862936]  alloc_new_node_page+0x2b6/0x400
[ 3097.867353]  migrate_pages+0x528/0x2fe0
[ 3097.871331]  ? mpol_set_nodemask+0x450/0x450
[ 3097.875750]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3097.881287]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3097.886653]  ? mpol_set_nodemask+0x450/0x450
[ 3097.891062]  kernel_move_pages+0xde2/0x1820
[ 3097.895389]  ? migrate_pages+0x2fe0/0x2fe0
[ 3097.899623]  ? __se_sys_futex+0x28f/0x3b0
[ 3097.903885]  ? __se_sys_futex+0x298/0x3b0
[ 3097.908042]  ? do_futex+0x1880/0x1880
[ 3097.911849]  __x64_sys_move_pages+0xdd/0x1b0
[ 3097.916259]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3097.920841]  do_syscall_64+0xf9/0x620
[ 3097.924642]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3097.929820] RIP: 0033:0x7f992dec9e99
[ 3097.933527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3097.952418] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3097.960114] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3097.967373] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3097.974630] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3097.981888] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3097.990102] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3098.003739] CPU: 1 PID: 27801 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3098.011643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3098.021001] Call Trace:
[ 3098.023599]  dump_stack+0x1fc/0x2ef
[ 3098.027240]  warn_alloc.cold+0x7b/0x18f
[ 3098.031223]  ? zone_watermark_ok_safe+0x260/0x260
[ 3098.036076]  ? try_to_free_pages+0x2d7/0x7c0
[ 3098.040515]  ? wait_for_completion_io+0x10/0x10
[ 3098.045194]  __alloc_pages_nodemask+0x232f/0x2890
[ 3098.050047]  ? debug_check_no_obj_freed+0x201/0x490
[ 3098.055073]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3098.059919]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3098.065114]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3098.069724]  alloc_new_node_page+0x2b6/0x400
[ 3098.074134]  migrate_pages+0x528/0x2fe0
[ 3098.078121]  ? mpol_set_nodemask+0x450/0x450
[ 3098.079831] Node 0 active_anon:825912kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3098.082537]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3098.082554]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3098.121288]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 3098.125791]  ? isolate_lru_page+0xa3f/0xfb0
[ 3098.130169]  kernel_move_pages+0x506/0x1820
[ 3098.134500]  ? migrate_pages+0x2fe0/0x2fe0
[ 3098.138743]  ? retint_kernel+0x2d/0x2d
[ 3098.142638]  __x64_sys_move_pages+0xdd/0x1b0
[ 3098.147047]  ? do_syscall_64+0x56/0x620
[ 3098.151021]  do_syscall_64+0xf9/0x620
[ 3098.154825]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3098.160011] RIP: 0033:0x7fe0a8319e99
[ 3098.160260] Node 1 active_anon:157596kB inactive_anon:100268kB active_file:16888kB inactive_file:340344kB unevictable:0kB isolated(anon):5272kB isolated(file):0kB mapped:91748kB dirty:852kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3098.163721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3098.163730] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3098.218772] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3098.226042] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 0000000000000000
[ 3098.233311] RBP: 00007fe0a8373ff1 R08: 0000000000000000 R09: 0000000000000000
15:31:13 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3098.238059] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:148kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3098.240578] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3098.240587] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
15:31:13 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3098.297404] CPU: 0 PID: 27781 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3098.305319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3098.314680] Call Trace:
[ 3098.317369]  dump_stack+0x1fc/0x2ef
[ 3098.321018]  warn_alloc.cold+0x7b/0x18f
[ 3098.325015]  ? zone_watermark_ok_safe+0x260/0x260
[ 3098.329873]  ? try_to_free_pages+0x2d7/0x7c0
[ 3098.334309]  ? wait_for_completion_io+0x10/0x10
[ 3098.339002]  __alloc_pages_nodemask+0x232f/0x2890
15:31:13 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa0300907800"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3098.343863]  ? debug_check_no_obj_freed+0x201/0x490
[ 3098.349001]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3098.353851]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3098.358965]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3098.363591]  alloc_new_node_page+0x2b6/0x400
[ 3098.368014]  migrate_pages+0x528/0x2fe0
[ 3098.372007]  ? mpol_set_nodemask+0x450/0x450
[ 3098.376462]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3098.377718] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3098.382003]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3098.382032]  kernel_move_pages+0xde2/0x1820
[ 3098.382056]  ? migrate_pages+0x2fe0/0x2fe0
[ 3098.382073]  ? __se_sys_futex+0x28f/0x3b0
[ 3098.397648] Node 0 DMA32 free:39720kB min:35996kB low:44992kB high:53988kB active_anon:823264kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1828kB local_pcp:1656kB free_cma:0kB
[ 3098.400956]  ? __se_sys_futex+0x298/0x3b0
[ 3098.400977]  ? do_futex+0x1880/0x1880
[ 3098.401000]  __x64_sys_move_pages+0xdd/0x1b0
[ 3098.401017]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3098.409842] lowmem_reserve[]: 0 0 1 1 1
[ 3098.434373]  do_syscall_64+0xf9/0x620
[ 3098.434397]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3098.434410] RIP: 0033:0x7f6a683bfe99
[ 3098.434424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3098.434431] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3098.434444] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3098.434451] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3098.434459] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3098.434466] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3098.434479] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
15:31:13 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6264002c003b3ef278776330fd1e646f8b3c8324ae59816c09567d3c3f74dcdb5c032b034ccc58ff000000000000001f40ffffffffffffbf2aa35b44e849596a29d54a8af5"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'})
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3098.476214] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3099.156569] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3099.246283] romfs: VFS: Can't find a romfs filesystem on dev loop4.
[ 3099.266234] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3099.278711] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3099.284309] CPU: 0 PID: 27831 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3099.292194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3099.301555] Call Trace:
[ 3099.304151]  dump_stack+0x1fc/0x2ef
[ 3099.307791]  warn_alloc.cold+0x7b/0x18f
[ 3099.311774]  ? zone_watermark_ok_safe+0x260/0x260
[ 3099.316632]  ? try_to_free_pages+0x2d7/0x7c0
[ 3099.321064]  ? wait_for_completion_io+0x10/0x10
[ 3099.325751]  __alloc_pages_nodemask+0x232f/0x2890
[ 3099.330612]  ? debug_check_no_obj_freed+0x201/0x490
[ 3099.335658]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3099.340510]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3099.345624]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3099.350235]  alloc_new_node_page+0x2b6/0x400
[ 3099.354654]  migrate_pages+0x528/0x2fe0
[ 3099.358643]  ? mpol_set_nodemask+0x450/0x450
[ 3099.363068]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3099.368619]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3099.371600] lowmem_reserve[]: 0 0 0 0 0
[ 3099.373994]  kernel_move_pages+0xde2/0x1820
[ 3099.374016]  ? migrate_pages+0x2fe0/0x2fe0
[ 3099.386494]  ? __se_sys_futex+0x28f/0x3b0
[ 3099.390649]  ? __se_sys_futex+0x298/0x3b0
[ 3099.394807]  ? do_futex+0x1880/0x1880
[ 3099.398699]  ? process_vm_rw+0x1b0/0x250
[ 3099.402770]  __x64_sys_move_pages+0xdd/0x1b0
[ 3099.407183]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3099.410451] Node 1 Normal free:1803532kB min:53876kB low:67344kB high:80812kB active_anon:157996kB inactive_anon:100268kB active_file:16888kB inactive_file:340388kB unevictable:0kB writepending:888kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:45632kB pagetables:75828kB bounce:0kB free_pcp:2724kB local_pcp:1384kB free_cma:0kB
[ 3099.411761]  do_syscall_64+0xf9/0x620
[ 3099.411780]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3099.411795] RIP: 0033:0x7f992dec9e99
[ 3099.455010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3099.473914] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3099.481630] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3099.488900] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
15:31:14 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3099.496171] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3099.503438] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3099.510709] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3099.587098] warn_alloc_show_mem: 3 callbacks suppressed
[ 3099.587112] Mem-Info:
[ 3099.594938] active_anon:246027 inactive_anon:67444 isolated_anon:912
[ 3099.594938]  active_file:4223 inactive_file:85098 isolated_file:0
[ 3099.594938]  unevictable:0 dirty:222 writeback:0 unstable:0
[ 3099.594938]  slab_reclaimable:136761 slab_unreclaimable:316881
[ 3099.594938]  mapped:76014 shmem:71879 pagetables:22167 bounce:0
[ 3099.594938]  free:463008 free_pcp:792 free_cma:0
[ 3099.607820] lowmem_reserve[]: 0 0 0 0 0
[ 3099.667909] Node 0 active_anon:826412kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3099.742215] Node 0 DMA: 7*4kB (UME) 28*8kB (UMH) 8*16kB (UMH) 1*32kB (H) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3099.777085] Node 1 active_anon:157292kB inactive_anon:100268kB active_file:16888kB inactive_file:340388kB unevictable:0kB isolated(anon):4752kB isolated(file):0kB mapped:92364kB dirty:888kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3099.815109] Node 0 DMA32: 2167*4kB (UM) 1636*8kB (UME) 817*16kB (UME) 155*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39788kB
15:31:14 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>0x0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:14 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6264002c003b3ef278776330fd1e646f8b3c8324ae59816c09567d3c3f74dcdb5c032b034ccc58ff000000000000001f40ffffffffffffbf2aa35b44e849596a29d54a8af5"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'})
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6264002c003b3ef278776330fd1e646f8b3c8324ae59816c09567d3c3f74dcdb5c032b034ccc58ff000000000000001f40ffffffffffffbf2aa35b44e849596a29d54a8af5"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

15:31:14 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3099.858409] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3099.905817] Node 0 DMA free:11028kB min:204kB low:252kB high:300kB active_anon:76kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3099.932905] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3099.943780] Node 0 DMA32 free:40684kB min:35996kB low:44992kB high:53988kB active_anon:822660kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1628kB local_pcp:260kB free_cma:0kB
[ 3099.991869] Node 1 Normal: 3823*4kB (ME) 2068*8kB (UME) 1697*16kB (UME) 2347*32kB (UME) 1012*64kB (UME) 1538*128kB (M) 1096*256kB (M) 732*512kB (UME) 368*1024kB (UME) 1*2048kB (E) 91*4096kB (M) = 1802700kB
[ 3100.126937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3100.144306] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3100.203713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3100.242097] romfs: VFS: Can't find a romfs filesystem on dev loop4.
[ 3100.265179] lowmem_reserve[]: 0 0 1 1 1
[ 3100.315077] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3100.393298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3100.629613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3100.684292] 82360 total pagecache pages
[ 3100.710361] lowmem_reserve[]: 0 0 0 0 0
[ 3100.729801] 0 pages in swap cache
15:31:15 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:15 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6264002c003b3ef278776330fd1e646f8b3c8324ae59816c09567d3c3f74dcdb5c032b034ccc58ff000000000000001f40ffffffffffffbf2aa35b44e849596a29d54a8af5"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3100.744545] Node 1 Normal free:1803020kB min:53876kB low:67344kB high:80812kB active_anon:157416kB inactive_anon:100268kB active_file:16892kB inactive_file:340408kB unevictable:0kB writepending:916kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:45504kB pagetables:75616kB bounce:0kB free_pcp:2948kB local_pcp:1468kB free_cma:0kB
[ 3100.798721] Swap cache stats: add 0, delete 0, find 0/0
[ 3100.823325] Free swap  = 0kB
[ 3100.828186] lowmem_reserve[]: 0 0 0 0 0
[ 3100.832268] Node 0 DMA: 7*4kB (UME) 27*8kB (UMH) 10*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11028kB
[ 3100.849679] Total swap = 0kB
[ 3100.853307] 2097051 pages RAM
[ 3100.861338] 0 pages HighMem/MovableOnly
[ 3100.883697] Node 0 DMA32: 2203*4kB (UM) 1661*8kB (ME) 640*16kB (UME) 173*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37940kB
[ 3100.885215] 369649 pages reserved
[ 3100.930778] 0 pages cma reserved
[ 3100.965054] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 3100.994868] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
15:31:16 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:16 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x0, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:16 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>0x0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3101.006886] Node 1 Normal: 3861*4kB (UME) 2064*8kB (UME) 1843*16kB (UME) 2359*32kB (UME) 1018*64kB (UME) 1545*128kB (M) 1103*256kB (M) 736*512kB (UME) 370*1024kB (UME) 2*2048kB (ME) 89*4096kB (M) = 1806564kB
[ 3101.025870] romfs: VFS: Can't find a romfs filesystem on dev loop4.
[ 3101.026578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3101.047668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3101.063096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3101.072716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3101.082071] 82363 total pagecache pages
[ 3101.086837] 0 pages in swap cache
[ 3101.090704] Swap cache stats: add 0, delete 0, find 0/0
[ 3101.096775] Free swap  = 0kB
[ 3101.100164] Total swap = 0kB
[ 3101.103550] 2097051 pages RAM
[ 3101.107398] 0 pages HighMem/MovableOnly
[ 3101.111747] 369649 pages reserved
[ 3101.116328] 0 pages cma reserved
15:31:16 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000000, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:16 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa0300907800"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:16 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbca"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3101.830646] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
15:31:17 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x0, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:17 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:17 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 64)
io_setup(0x6, &(0x7f0000000080)) (async, rerun: 64)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000000, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:17 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:17 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa0300907800"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:18 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x0, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:18 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:18 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:18 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:18 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000000, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:18 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3104.213995] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3104.216620] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3104.251516] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3104.269834] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3104.317023] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3104.332610] CPU: 1 PID: 27962 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3104.340603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3104.349955] Call Trace:
[ 3104.352551]  dump_stack+0x1fc/0x2ef
[ 3104.356187]  warn_alloc.cold+0x7b/0x18f
[ 3104.360165]  ? zone_watermark_ok_safe+0x260/0x260
[ 3104.365008]  ? try_to_free_pages+0x2d7/0x7c0
[ 3104.369425]  ? wait_for_completion_io+0x10/0x10
[ 3104.374109]  __alloc_pages_nodemask+0x232f/0x2890
[ 3104.378960]  ? debug_check_no_obj_freed+0x201/0x490
[ 3104.383986]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3104.388836]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3104.393944]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3104.398549]  alloc_new_node_page+0x2b6/0x400
[ 3104.402956]  migrate_pages+0x528/0x2fe0
[ 3104.406948]  ? mpol_set_nodemask+0x450/0x450
[ 3104.411370]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3104.416695] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3104.416906]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3104.416929]  kernel_move_pages+0xde2/0x1820
[ 3104.428857] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3104.434050]  ? migrate_pages+0x2fe0/0x2fe0
[ 3104.434069]  ? __se_sys_futex+0x28f/0x3b0
[ 3104.451822]  ? __se_sys_futex+0x298/0x3b0
[ 3104.455984]  ? do_futex+0x1880/0x1880
[ 3104.459794]  __x64_sys_move_pages+0xdd/0x1b0
[ 3104.464219]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3104.468809]  do_syscall_64+0xf9/0x620
[ 3104.472624]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3104.477817] RIP: 0033:0x7f992dec9e99
[ 3104.481539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3104.500444] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3104.508164] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3104.515435] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3104.522705] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3104.529970] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3104.537237] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3104.544544] CPU: 0 PID: 27966 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3104.552432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3104.561878] Call Trace:
[ 3104.564496]  dump_stack+0x1fc/0x2ef
[ 3104.568138]  warn_alloc.cold+0x7b/0x18f
[ 3104.572121]  ? zone_watermark_ok_safe+0x260/0x260
[ 3104.576952]  ? retint_kernel+0x2d/0x2d
[ 3104.580837]  ? wait_for_completion_io+0x10/0x10
[ 3104.585500]  __alloc_pages_nodemask+0x232f/0x2890
[ 3104.590341]  ? debug_check_no_obj_freed+0x201/0x490
[ 3104.595351]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3104.600183]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3104.604752]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3104.609499]  ? retint_kernel+0x2d/0x2d
[ 3104.613389]  alloc_new_node_page+0x2b6/0x400
[ 3104.617784]  migrate_pages+0x528/0x2fe0
[ 3104.621748]  ? mpol_set_nodemask+0x450/0x450
[ 3104.626150]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3104.631674]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3104.637033]  kernel_move_pages+0xde2/0x1820
[ 3104.641349]  ? migrate_pages+0x2fe0/0x2fe0
[ 3104.645574]  ? retint_kernel+0x2d/0x2d
[ 3104.649453]  __x64_sys_move_pages+0xdd/0x1b0
[ 3104.653848]  ? do_syscall_64+0x56/0x620
[ 3104.657808]  do_syscall_64+0xf9/0x620
[ 3104.661597]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3104.666771] RIP: 0033:0x7f1e38c8fe99
[ 3104.670474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3104.689361] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3104.697065] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3104.704336] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3104.711605] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3104.718866] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3104.726122] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3104.736343] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3104.741496] CPU: 0 PID: 27956 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3104.742831] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3104.749370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3104.749376] Call Trace:
[ 3104.749399]  dump_stack+0x1fc/0x2ef
[ 3104.749419]  warn_alloc.cold+0x7b/0x18f
[ 3104.749437]  ? zone_watermark_ok_safe+0x260/0x260
[ 3104.749451]  ? try_to_free_pages+0x2d7/0x7c0
[ 3104.749474]  ? wait_for_completion_io+0x10/0x10
[ 3104.749498]  __alloc_pages_nodemask+0x232f/0x2890
[ 3104.749521]  ? debug_check_no_obj_freed+0x201/0x490
[ 3104.749546]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3104.749560]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3104.749578]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3104.749615]  alloc_new_node_page+0x2b6/0x400
[ 3104.749631]  migrate_pages+0x528/0x2fe0
[ 3104.820803]  ? mpol_set_nodemask+0x450/0x450
[ 3104.825335]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3104.830892]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3104.836282]  kernel_move_pages+0xde2/0x1820
[ 3104.840620]  ? migrate_pages+0x2fe0/0x2fe0
[ 3104.844866]  ? __se_sys_futex+0x298/0x3b0
[ 3104.849023]  ? do_futex+0x1880/0x1880
[ 3104.852839]  __x64_sys_move_pages+0xdd/0x1b0
[ 3104.857281]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3104.861864]  do_syscall_64+0xf9/0x620
[ 3104.865672]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3104.870864] RIP: 0033:0x7f12f54cce99
[ 3104.874574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3104.893477] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3104.901200] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3104.908474] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3104.915741] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3104.923007] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3104.930272] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3104.937570] CPU: 1 PID: 27957 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3104.940579] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 3104.945448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3104.945454] Call Trace:
[ 3104.945474]  dump_stack+0x1fc/0x2ef
[ 3104.945494]  warn_alloc.cold+0x7b/0x18f
[ 3104.945512]  ? zone_watermark_ok_safe+0x260/0x260
[ 3104.945528]  ? try_to_free_pages+0x2d7/0x7c0
[ 3104.979354]  ? wait_for_completion_io+0x10/0x10
[ 3104.984028]  __alloc_pages_nodemask+0x232f/0x2890
[ 3104.988872]  ? rcu_nmi_exit+0xb3/0x180
[ 3104.992764]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3104.997630]  alloc_new_node_page+0x2b6/0x400
[ 3105.002031]  migrate_pages+0x528/0x2fe0
[ 3105.005999]  ? mpol_set_nodemask+0x450/0x450
[ 3105.010405]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3105.015944]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3105.021314]  kernel_move_pages+0xde2/0x1820
[ 3105.025634]  ? migrate_pages+0x2fe0/0x2fe0
[ 3105.029865]  ? retint_kernel+0x2d/0x2d
[ 3105.033756]  __x64_sys_move_pages+0xdd/0x1b0
[ 3105.038154]  ? do_syscall_64+0x56/0x620
[ 3105.042117]  do_syscall_64+0xf9/0x620
[ 3105.045914]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3105.051094] RIP: 0033:0x7f6a683bfe99
[ 3105.054797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3105.073686] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3105.081384] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3105.088645] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3105.095902] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3105.103158] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3105.110417] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3105.115216] warn_alloc_show_mem: 1 callbacks suppressed
[ 3105.115220] Mem-Info:
[ 3105.125555] CPU: 0 PID: 27967 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3105.133444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3105.142803] Call Trace:
[ 3105.145404]  dump_stack+0x1fc/0x2ef
[ 3105.149044]  warn_alloc.cold+0x7b/0x18f
[ 3105.153037]  ? zone_watermark_ok_safe+0x260/0x260
[ 3105.157892]  ? try_to_free_pages+0x2d7/0x7c0
[ 3105.162321]  ? wait_for_completion_io+0x10/0x10
[ 3105.167011]  __alloc_pages_nodemask+0x232f/0x2890
[ 3105.171874]  ? debug_check_no_obj_freed+0x201/0x490
[ 3105.176922]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3105.181780]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3105.186899]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3105.191512]  alloc_new_node_page+0x2b6/0x400
[ 3105.195926]  migrate_pages+0x528/0x2fe0
[ 3105.199913]  ? mpol_set_nodemask+0x450/0x450
[ 3105.204343]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3105.209975]  ? retint_kernel+0x2d/0x2d
[ 3105.213871]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3105.219254]  ? mpol_set_nodemask+0x450/0x450
[ 3105.223675]  kernel_move_pages+0xde2/0x1820
[ 3105.228018]  ? migrate_pages+0x2fe0/0x2fe0
[ 3105.232300]  ? __se_sys_futex+0x28f/0x3b0
[ 3105.236455]  ? __se_sys_futex+0x298/0x3b0
[ 3105.240617]  ? lock_downgrade+0x720/0x720
[ 3105.244781]  ? do_futex+0x1880/0x1880
[ 3105.248598]  __x64_sys_move_pages+0xdd/0x1b0
[ 3105.253015]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3105.257606]  do_syscall_64+0xf9/0x620
[ 3105.261422]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3105.266613] RIP: 0033:0x7fe0a8319e99
[ 3105.270333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3105.289240] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3105.296958] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3105.304231] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3105.304561] active_anon:245057 inactive_anon:67444 isolated_anon:745
15:31:20 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:20 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:20 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3105.304561]  active_file:4229 inactive_file:85115 isolated_file:0
[ 3105.304561]  unevictable:0 dirty:244 writeback:0 unstable:0
[ 3105.304561]  slab_reclaimable:136774 slab_unreclaimable:316824
[ 3105.304561]  mapped:75917 shmem:71879 pagetables:22111 bounce:0
[ 3105.304561]  free:463952 free_pcp:1141 free_cma:0
[ 3105.311497] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3105.311505] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3105.311514] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
15:31:20 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
clone(0x4000, &(0x7f00000004c0)="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", &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200)="4d2d26e4916064a684c17566a5a747f091cc730179c6d6530b9b6a6c89953d2e2cc7068790115af4ca14230fe7a087cd58b505bbd7dac30dcc3b33be63c164dca0f58c06bfe5e22d00b9da65c0c9d731caf5cb790914a00b92154be3d76c6e1801836b88ec4fd440724dddba564f85c80c1cf1a02b4aae3fd488978b7d4e163ab7bd5722b2e9f3bced32ab0d0c33693dd7db7092fbacaee92156c30f0a008584a55dab86162bcd88891b283108c57bae35c5e8a66aa546ed68db5950dc4bb6")
r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x133}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="9ffd", 0x2}], 0x1)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001540), 0x400, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
io_submit(0x0, 0x5, &(0x7f00000027c0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)="9002a9eb722faa2fac7578f0d943d53eafe2d2b064bd2be212f827b8787b340bae377a2960230f191f96f40823b681bc0ad0dcb1002a2a3b3a317637ffd6bd69283e996972e8486aeb30c2e3f5157ed74623d177cfb9347e73c3c92b68db2c288ea3adfcc29571718e", 0x69, 0x156, 0x0, 0x2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000001780)="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", 0x1000, 0x6, 0x0, 0x1, r2}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x8001, r1, &(0x7f0000001580)="53b500c32a3e13b045605c5c0163ded0b8694f794289e062", 0x18, 0x4, 0x0, 0x1}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000001600)="4d66441600e178c41df204090ea942ae2e979c71ab06", 0x16, 0x9}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x3, 0xf3a4, r0, &(0x7f0000001680)="923d234c816c93c7aa834880b40fac319ad4171380d59acd0f5bab668bdbead2476845e71011943598cdeefd7f11d483b18d3810c5698a9f2deb00597342c0b196b5b7a708348b944468c03ac9bc2f1e97968613feb73675371a601fb190d3dd1c22db28f868a0be911c30cf471bc2d7cdd4034d74bfd6f71290c45539bc6ea64f6b500e7830080386cc0536a96c454242d0", 0x92, 0xfffffffffffffffa, 0x0, 0x2, r2}])
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00db0000000000d6fe4ce0fa9cfaed8a264cb7ca00c1"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3105.994344] Node 0 active_anon:823404kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3106.231664] warn_alloc_show_mem: 3 callbacks suppressed
[ 3106.231669] Mem-Info:
[ 3106.239605] active_anon:245710 inactive_anon:67444 isolated_anon:1685
[ 3106.239605]  active_file:4229 inactive_file:85115 isolated_file:0
[ 3106.239605]  unevictable:0 dirty:244 writeback:0 unstable:0
[ 3106.239605]  slab_reclaimable:136774 slab_unreclaimable:316372
[ 3106.239605]  mapped:75919 shmem:71879 pagetables:22173 bounce:0
[ 3106.239605]  free:462686 free_pcp:1062 free_cma:0
[ 3106.274384] Node 0 active_anon:824804kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3106.302432] Node 1 active_anon:158036kB inactive_anon:100268kB active_file:16912kB inactive_file:340456kB unevictable:0kB isolated(anon):6740kB isolated(file):0kB mapped:91984kB dirty:976kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
15:31:21 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3106.332826] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:72kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3106.361232] lowmem_reserve[]: 0 2693 2695 2695 2695
15:31:21 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
clone(0x4000, &(0x7f00000004c0)="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", &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200)="4d2d26e4916064a684c17566a5a747f091cc730179c6d6530b9b6a6c89953d2e2cc7068790115af4ca14230fe7a087cd58b505bbd7dac30dcc3b33be63c164dca0f58c06bfe5e22d00b9da65c0c9d731caf5cb790914a00b92154be3d76c6e1801836b88ec4fd440724dddba564f85c80c1cf1a02b4aae3fd488978b7d4e163ab7bd5722b2e9f3bced32ab0d0c33693dd7db7092fbacaee92156c30f0a008584a55dab86162bcd88891b283108c57bae35c5e8a66aa546ed68db5950dc4bb6")
r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x133}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="9ffd", 0x2}], 0x1)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001540), 0x400, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
io_submit(0x0, 0x5, &(0x7f00000027c0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)="9002a9eb722faa2fac7578f0d943d53eafe2d2b064bd2be212f827b8787b340bae377a2960230f191f96f40823b681bc0ad0dcb1002a2a3b3a317637ffd6bd69283e996972e8486aeb30c2e3f5157ed74623d177cfb9347e73c3c92b68db2c288ea3adfcc29571718e", 0x69, 0x156, 0x0, 0x2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000001780)="9920fbabbc8baaceb7834943e7911a6c52b9461d574421f17be8e7036069cb53330052057a9615da21b165948415358751d9dbb3d5062a9df63df6f5c4379fc297a7506b8b30ac9beddd6a54ded5065ee4637711113fea149c19b33c562d0a814917bc3406adab54dec60f07debb88d01dfcb07d49a188b23fcf811fd7c8a0e47dd50acf90c415eb5ed68655a1388eb726aeda30371877ad29c77f9ebd2b1a8a67d6572dcd20859368d7a624c9aa58a60a37e40ce3d7a278a22e3e2b9f6f31524665a034ac1469c48ad63e11d3254150fa0b4ba233d1c616dd503635d1a1f7cada3c6a60f9aa219dcf1800646287acaeb0c6c94769e380638435aec3b5439eead743866b3fcd6b97e3f0fce962ab941011b2a79bc30188d4f4878867a4260deb65b36d7485ff49cbdacc9c8f543f3940e24d75db2a7c0de7d02952c79364d45a2dc0fb7aec2c4971add14d3e20a663813515ef85aaefc3b6543a4c8937b09dc01995f8cb765887baf06c9a49f33a71ed31a9bf49f05977f43c0fca7b412b3eef6c7ba4532e9621d0fa826a854e4666ed268427baa4154551757a0a3245bc652cafc858f283ab5f79ba4bcfff0e7f65ef7906c50b219c914380221b4e240e0c96ad483fe43764ae9bd8d8e54bbb4d8a886c6b50790159287fdfcbc76d89f38619f8f4639c85c7de8cd0d16d47f11ee7fe8a27692c7ee447693769f61519d318de1aab060e0d244b8fdd628ced048f39ea8ea3c807a2f26f60379b6167a616366cae2133eec9143be5fc6aa1195e3cbb7910d54913c15da3a3d001698c37542b1cf149927bab79a30b70ac94e858181a83807b20baa421f0578de1a86134ce98fca231c0ac1155bd7b399d7e341a521cf07a5fb25010984903a2d76ffbb3bf8ea4ee83af3adf053498a5a1a44f9177b290c9482f7a595933180df1782ebded09fd9477f0b2ea50b1332fdfcee8074b1b4a9026d96a316ebffc926d88262c1901ae06363bcbb8ccf06f099029f909addf2a925dc68985bf16ed6a59f7bc135c32075d763be03e17458755652068a517aaacc8d2259bb4fc750754506f2b730ba94ed4e254364d0377af40de8ebfc071792315ffb7eae5af9dedbd1c8d2b5c35e27f4f2ed8751b0cb7f93675ac358ce7673059f8c367c0902b183533a073bb560695b57b3643bde2fa73bcd066cc13e303dce2bb90fb5f2cdc28401f70492bf602f1c706e6608710b9d4488acb0b0cc8deaaaf49cd84ae992ab202c104225b283d81a4e7d3384f596324d03e67c43aec0070f2635fdab7edec04c1f86937b366d2df50c5c21ca6a3cae0e95b2f99d5206f3f1284fc9ba2ae06066e7c690699a50c34df88f250c2b928b0682db77b609e063258c67f2c252fc12d7fd30c6b24489d4ca537b1f41fa7901070d5df46027949588c8431e0f58469bb015f9766240b445a7520c4a94714762f53234f7eabd9fb235599ed75d2de46f8d15b2db3cecc07276b55e3ef4e934a75c6a3674879e6bd4eeb9fa8dace448b96c5fde3352813015f25bd95482e9e1cfceaa37a9191a35491bc1ea8b427054c32dcb3e57f9f2bc11e87e9c99d1faabbba8acd0c74d964e19095900e8952f670f16faaf1712243358ccbe2389799ea7e271da4db635f16a14e57edfb9595f2fd332539cb9e196509f1b984df0b535bf95db156e0c250cee9535a7080663e97fb58c292bc64676d1d1170d3310df0602940a4ecb08458b595869492d802e80cbdca88d8286a3aee42f4b608005f3159c867ce23229de2d7d86794d5b10b4d53bf9d02e8049c340c77ddcf7c371b30a7b7989bd0489fb23f56d4814f8af6170710099ddb4a7b97ac8802599165a642c34e5088fb553760adf69a8532de69af6481b5cfbd5f7aa4abee1bc5267fe6f214cbe1fbe666894dd3c0ca314b584a45a3a6714c5acfee9d3bf228741155f5b89eb58c116b72a6f1194ed71d3fd3af4dbc9879d617f868aabce330bf6e05299509f0a6661bdf7e5989748f858f49f827c403b35abd1796b966ac57c98e30b9789066b9038c06de821c41ebad4a7f3e373083397c21a00cb852c0b15941d00777f76b43e28d9dc92d4518cc5a3e58dfa61b132b02a90e0bac9637396e68ca285b4c308d09ef9c63573a5f345815e2b84d1e5d8960385bd603b5b7292c56f157ae1834a8f83181d9bda34b8a61cc17d9c937ae251404d6e144bf74365c73a04daf3fb779375556aa199edfe0c8d9bd8ad504f1ce249466797ffef99cd13627fd103f75f18bae0462f4ed037a9ff606756a5bcfcc41934c8a95912e36eaf6f49f5ebbd3f9959bd87ac7995e47c2618728d4ff9787e83f1e4173f940ba2c002e214298325e1c3e60714e680acfd06748d46e21a0b5a44a5108915ae89a4c1bd8789743c0ed57d54ea93a0df86876724358bec4c3436ce90ca50a433bc9d477e79fe9f3eb0e0688967a7199e3554167ca23fee7e8daedd3ffbf0c62d2e3af93d5f1ca254230cfdd0c6e224ee48f2769fd601b597f56c7d48eb5c9602c18b938213513467b0fdf41faaba5ed08129aadbd2feea971f63bb596e847dab4bc5d93da073af3785211c5882f97da4608c8357689596d0a3f5160bf91995c9395e9c938efe39d6bc0f24732495158668d7182417451cfdd77da8f4b386e6bcbd3f6d711371d21f46a9d8932ffcaeb65af8575ec0ca66fc571d4df1770274f9bb7d92707c9ec23501f823e767fee6a93c6ed0a6ade86c44e011c7bb8051d3d83d0f54f4e3ae839039c9b0ad49fdc522519e5a5651d1c3db50d4726c3ece42c366c79cb68fbf67351d5aedf90febf591b5908a826355c816cc226fff0403655caa2c34691602def8e4ff6cd52594881f15873f98bfcb6cdd99dede674c6d4cea5ae1e582276f0811283e3cdb310d20b4cda62387758669780f8307f4db3fe659f62536ab434275aed5384d97ec32e5fa60ffab67281234d1e7afb20d134c5cf13b470935ed1d58afa142fedc317cbf891ebabcb81850d4127cbf84e1e36fe098193e463d9f08d8578d5a95b6808dcb9f52da00eb0db6fcb47096f736b77be3e21c22325c29c4c5ee9fcc62b8a310e0630649096b2ddcdddf274b4e9b7f67de80664fc14087a1efcb6d9b020deadf321b723c6fcc5b896b806442fe89569300a880f10da45c4d9f0364aa820a08b854274f9cd00f43cfb8efb3a14cc2103f70014475a36c969cd8ee0880087713fa841249a0a0c1aff81cda4329948d5e3b4311b3e734b71224076ba30733c8faed4cc371c2061b0e13bb4c57f6def73bd540ed421514ad8604c51a58781c6f9be4de1bbe0c91e8eb31c0f35da2784988b26014355a2cfa73ca6667dee57088ef383aa5e3b1e6ef3792b55e0c2e8bda38c78f8114a23cc0195cb8950070df3f9c323071b1b40a292c899fe7bb48a3f44b0e2907653c07a15ebcee81d59cef7a303510447eaf899af1c09569d3a5c86bc248da19c192ec985957b399de4bce632094fe47677e63e89594afb749068fb594c18bef5aefad834e2da8a23a4cd62e75f5496b90d85fce6ec349e610b2abf90c8da21fa4d21d5cae0604bad7d788b4b0f6d8ac60152c4154f2d1b90fd04b98c8e7c2c111aea58470339846a403d6de7b136d94b01e3d8698e60f5830256362974da0a38b1e8885da7558c89735ffded32177067dcc9787f35e2b914cb867107301317847f275b7ebca2aa5e2ba77adde10c1859b64e2ecb5e0a7f036ad5ccce62c229587d9341e4e4fb3dd9c3909cce7597c5d274839b25672c4b8181875aa6f829c3696f86f5d7b9238652008d0903720f89a0700a33fb3938ed6219799f2c69d265b9b77d566b84a6046bcd281f9d881d1f8d48e4b04e93d7a3059632da1c3112d0775adbc02e16dec2d11debd10335060eec95bcabb4a4ae2293921739daa69e7659dd334798324a1d9b2836b5f09fcf0a868be4d3b398bd52c061663081c9f874efc2155a3f334ce3f5401de26680b0344fd816af11ddbb40c99a28d2d718bbbee95bdc299d437e97402c22f7c2afb64e0406b1dcc5583550c79d408001e5322bb7c11293e14dc4c3411452f8b1b07137b28e8b425b008a47dcf8747d5e91122856cc01c0500bd4c4af76a7647aa22ff94578de43221f98c0bd46b3045923836be623bf5cfb72b9d1d203488119f4d9e4a4338d15a8f3c958617a842594297352de4240b270a29fb6dcba210893af1331a1d72670d096d986c6538bcbab16802e69b115e6451a1d27aa12892c9e40382decb7fd6d89c7155a775c5d3081e6c67c62ac10d296838ccc7b6289bb3c2baae5605276e263a189e858f7aef3d97e406b24b5546a692fd25b377c489939d0ad6eecd6009eb3892ec0735d3b772f7f3fa5e34ab14b92ec68dfe497fc10322baf75cc6e57c215d1e1e0a36becb3c09cd0b19c25dc7cbc25a4e2ce3f298c8f6e70f92c0a8628e30f6954c046cddf872edc83519ce7d3469585f4871a665b2e946a5d293aa56b4eb10158c606add0d955ad68aa2e013bea78ac21341c44a0377093eb47b09c3e91de2bcd9d59744fb12c0b5d63cb8e0bd14b9d278409f46107a042cd092d700c107a21a321b186f06a56d86bae34180a54cbd3b24a57f0594143db52a3ed4c3a4e71659ea8326d3024c703a19d72add427ac4e685a046561a2906f66ed6cdf0c0bcf70efe5f502b6240f91639ddda9e1670aa5f4b681164c7bf69dceb40965a3fe40d2d7f1695764ca4ca125c9c7972eb5924c00de5f2f3fac368d2b3a9ff566f0400ffc71fcd0d7b6d0a2085200b6f0f560ef7c08d920dd528fa7573c80f88f147a7865443570ab5688e25fbb4164c55b2ff35e95dd29345f37622c5c684bf8b002d64e8eb0ec3d74ea5253b9056342aecd484185e9fe6f7f8fa4b16e5c0ac69420c873bf749c45856a9c4bad5a437d8c55a16de2f05226ff2364bdecef0eea0c5b927a20f88753f21ac898990bedc118e43ed11ac81600939a4f1ee48d783b2aec8b91f9fd5b497dc4aec276624947ac074338a2f0b38624feaca7d42a8855c7f005b0e3df2af98b16e34da92e1e4faeab854ca907fd96653741323ac34d797841906c48414dc262fb25077fc9efabbd1b677dea7b95f5a4037a8eddc63421f6cbedc35c3c8fb02573b2efd74b728ce97c0c8a5ffab80d0360b6025ac8e31a917f494874b7cdfa5b93fbcc0c91eb61bfe6d5afe18dceaa7c03f7ce36bce0184e8aef67bcd15558b39edd46760eb4dee519e1bae58bc01e6923601fc210c8791490adebac719cbe0c504140d64bd8c7eb390297b3e8012cb4f563c8553382268df5aa61b3b0cfd954dca7b659d3c2547f914f1a948654b6e75d78f2d33f763c73193d05d7c799ef564002fa4ce5c863b3d70ebfad3d9e93ba10b0f67212a0db26d7d5e192164065b3305b1073633659a1651889bad840319acde3ec7b1a3a2ec9cf4ea6fe2ff768ec3ea3ef6753cea2444cf3dbc4389b8e063e4dc8f4cb033d1d23ba10af57abbabda8a417018a9b5cce453447c7c19d324194daa05cb7577e5c5a6cf28061b1dc1d94c454df03aa4a243774ffc98b0348f0f961afd57235e9a291bec71838f299f61d29c095cdeb96ab9b8acdc7eb10018e41c918e66c74a41ef41652b7b66277ef0b2bb21f7800bdda040db5c5cd4eef4db4a77ec1cfdbed41649e47cc239357b497551f0abaf8de5680543f3fdce42f11b708031fa5cc735755e0ddca81c4c8a03ab131f737812409bb5bc2eed537187ffaf2715657ab5d837c4ace34498324fd565c5d51b6", 0x1000, 0x6, 0x0, 0x1, r2}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x8001, r1, &(0x7f0000001580)="53b500c32a3e13b045605c5c0163ded0b8694f794289e062", 0x18, 0x4, 0x0, 0x1}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000001600)="4d66441600e178c41df204090ea942ae2e979c71ab06", 0x16, 0x9}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x3, 0xf3a4, r0, &(0x7f0000001680)="923d234c816c93c7aa834880b40fac319ad4171380d59acd0f5bab668bdbead2476845e71011943598cdeefd7f11d483b18d3810c5698a9f2deb00597342c0b196b5b7a708348b944468c03ac9bc2f1e97968613feb73675371a601fb190d3dd1c22db28f868a0be911c30cf471bc2d7cdd4034d74bfd6f71290c45539bc6ea64f6b500e7830080386cc0536a96c454242d0", 0x92, 0xfffffffffffffffa, 0x0, 0x2, r2}])
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00db0000000000d6fe4ce0fa9cfaed8a264cb7ca00c1"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
clone(0x4000, &(0x7f00000004c0)="9a7b22ff768a4263696fefb07b062266ebf316e59c18d08ec0830ebc5d5876fe2896289df2167f795e13a0f5e01ece5e78dcf1649a95db9b7f35f0b747718330765a6b73c93826b20d475ebbac81d50abe300dcdd916dbe3d843da9d3ae09575c19b66404d23c7227a5d1b4fe1df3d0f382d27a34eb8857cd34af0ea08bb24e0926d3ee95e98836eaf791cb771b3340d0a0effac43e72ddfd474c6b8743628f40e2f1fed89c3282329c08da7c70098fc60879c3ca6c86627fa203734b01f03c5ba5ba292fc65a94697945d3b1a6f690df05ca40e8721260530a0c3bda7895498b6f02727c624374a7410a254af348bff629b2cd65c995f26bcec029b0708e82535c3b9a77508f7e8a222ede1b6fe814700663e51fa45c0e0930947b3127be657de48054e6dc7d3a9f300878b09768688ea436883855242799805448fae54c4c3fb404ca5180e5b93a15779f7cff5f7fb5ce2b605ed0da3711d9137fe83a61858553d4183f0e87218f49a64ccd75971e7b074e6ff844fb0dc73a92819cdf320789d8ba9bbccde4dc03b44b22b28fb349b43c26b5c4ece23c0f1d4277639de18d679e22cec196047a599b3344271535dbfb338d37b31710c818d5295d731bdadf79d4a66ac0af235696fb5d90d11716891351b33349bff184559cac5376a9d907f9cb4b2224bc69603e18ca3eec0f355ad979f51ee8153283cadb49e9e6c841f8e43baf9c583ebe708706d8454cf882da53bb67b73b68cbdc2e0a4df7d17bdb2817257d3b48533155c8652fcdd65bd459da972c988bcc21c50a57c8eecaedca7487a14b80c7de228bf4efccf22952daba774895206e58bf3bedcb187d8efa64392767ee12c902f710ce00c41b205a60d034b6b22dd9bc176339c0256c1244e579a7ed911d81603c90ff0139f08379c5198558ff04351a879cdf62cfbfa9dab2baaf6af353495748031074f8fd4f70ee8d60786af0503f4431fe973506e2307c91f5a1979209ef99487dfa9a277b66fcde625c5edb564906e08b3609fe2c83551faff730492cc1f6dc7be768236ea9fab9a8e9c61f60a78a66a77a7451724e9e764ddb78ddab2a97651fc3a5b669f05818015dff69f8dea13e128a8a23573d24ee801dd4978d860d355573ee0f9ed81cba2dd17655ad5ab3845fd490fa366ba55fc8ed19a8facf30c906047d13e2139db09e4a6ea14a5dc09e5ac5198d72b7e53e06a2e31c70fdc7396e1ca933dd770ed44f8b4d0dc725010051628bf532decfdeb4c50ba8fa46f6a6a33238d5f37abd642dde65c962b597d611434a34d5dfb5f4dd9a1350951ac3c1b247023caef95a7888cacb4234238e69dc23e4e137b0f673d14480a9fed750c37b94d4028c794ef79944118fd704fd6083107c26f6ad6e86a72ce80b993b151aa4c668bc7ddfdd194bd6acf5360f0df5e9be6ecbb140375247dba887a56511e3f1dabeab76b82a89b9db032bf4cbe2a04a492128d244dfd1eca7c8b0091c353829602b5b3a6dc6483043411e578f0a52c201c764b977d0167579039b0216baf19d1a138d097bb68ed9cdfbf1be2d52fba44ffe63ec341c81ec3dd6b6e008ce5795331a5676058238e97e6a2e854cc9e533bc047abfb89f2609bcc68550f88ad975712052511738aa65e15d87652c1bf10e7c2103c3bdff4505696f3d9795418cb5de457397b08a2d4d62ba71a94456a18cdab48137033271d076ed94553b444c7aa03f153b98813b2a83626a56064a8a83a100e64761f2f6d52a61a2f013a5ec71bd00ffa0cbc6f3df96211d2620c7e48d64761297309a7c843f39f64c8e121e7ae2bbbe3cafdda7daa2cc08b6e9a7108b36d1a0dbe34a202b416d1d1b8e14609ad4609c8fdf13322e3b731f09100cb07e236e47ee9f8d664f609c6de04e5b864a2a25260ea42188f04b9864429c7d626c117b85db97f2045a429b971c459272cf5a066864444c2defeba7df958136e0e22f566193aae41246be05e7a482722f5921bba342cc62ccf7700263e0148cdaae067b66ce067701878f8a5856a5f512058b900317617e8d8f741aa98b68239c51cf6bb82b7cee90d0307f3b6f607db4be360e91f845e7720d2d74a4b9563b95bf06a571f3fb6745f0363c6cb15cbcfdcccc86f46104d610d54ae3d45887e9b72fcbf1e6cf56c0949df2e6b627e9e28a3b8fa1251be1a913474f816e29cae7fe326fc3e37f2313aeec6b4ccae017bd22a55f396e1a2aeae3743cd1442208fe9771170b6749ee55ba5f06471c4a1e2aa186d6efec17bbb8c94cfc65c27cee444544b8e5d67645f66954a8d33dd954707f4d2abce24e0621abdf6d6e80630ef5eccbe072d8ad341638c5b89bb0ebcab960510d8a90df59f3145597dc5d66bed544212086651b12d2e8460b1b147aab0629f4b19384d2848540cf73713875b9a19961f3ef7c4723e36acb563afaa259cfc8df6c25d1bdbdb5d80f3a5f04783955b160c2a0be4a976be13ec3b2d5ad343fa116df6906892c95dd275dcd9198cd4dcb79edc04ab25049db8a34788b79aa14af95653f899759841e0748749ffa7e9b7f54f010d8284e63898a34d3d6a96e1762ae7184ff7c006e3e325ec5a2d13aa240c3b64580c01d11c01dd5efc157d7f560547206ac3300e2355070136d4d1202a8060cf9871ca2383d0876f2b2408f0ccf27f067227643edd11c20b18a278074fbb62ecb98c588264cfd4c8a8a1e876f90b12c8d02b7b076346448d794c0f88b2793bf5579205cc04284f1f5bcabc2451f7e565695093c9bc323de7f5da0f80d723b60476f2cd488ef835b1a9d8e183c60f3785c53c08341d3466335d08be94ab1f825ddb98ca1dffc9615220386fa68bed32c65e37aad6463613127a2ea2a1eedb79246270cf03e2d5ca1a624478def534709f0e7ac30edd94fa4ee03f39d46667ef12d6af685ea644e8683e3f0783349a56382191e1fc060a70ee99d3ce503c66943e378fad3465e746ebb770f9e386f0d4aaab695962de70af1aa3859418f153c4668d602f395702847363b572fac4e37a7220568b5c58f8c99e51c8d388d4f2efbd3d64599f2da3c68fba1a1d4b31a5aef8ce5b3a07b9a89ce80bc931d1ee0a7cc93c6e10d7ac53abb6521b2fb9a020e839b6d24e9260d3efab462aaf01789c8642cdceb0fa5f07c071c48b221674aacf84295654e80685cf1eb7dac83f4f85176510987d6bc178be21421ab35599bcf72c6ad138fb63594627288b25c4e99df699171065d95aa6e7c55a24de054039f5b1718ab9230fd90ddea2bede92751572686381b9f9bb93f8aaf906dc36615c294d2eb28ac5de99e9d8afc1d4629a41c4611cca089f0ff3469d486c17c961aa5c24a7ca590b07dbc420044345d59a25cdd956d06ef71b82b838d13e26de1248a7bdff02f87019cc89cd720b9e29ef13e488f5a53dc3f5fb450709e8aa49b2bb0b3fb5fd6a3c82528f21bdcdc441586d0a0704cf2d5708970699fd884887d6352be78c6c7d332db455e28a233c5a3a00f080ab81f6d263e8431acf4f1a7bf4f8a3f86a310c8e0b2112d9133d9271d1d696881181d9b9b7da4e78bf9f51c14b624de7908b9fe1b20605376e51a266ced4b14ebf709d3c24b278a2f1e5b077bbce0260e9abda220c978edda069a5b628f63e6ba33fd3481c458ab7b68441a5a1ac9b37a46bb6d62d22c655b2b79a8855e4b905e6f8d08a8f40eb0a101f685f50cc072399c7a04ed52306c0cceb0e05a5dacebe9576cd3be0d2f626647d223a090ac4db5419df4b8c15d099780b128c45025b7d6c68609eb40134c70d7a8ed2c4454b051ad6a143ce66eadedbd738e7af47fa42ce6332d024c93e4791b6b04b322d17b5715d320cc7b8b2aa1e92a13adb9b9bb847bba6d436b227b997fd1d003db57310d736de4eca2c8695e2a3d8ee6ee3b6e15dc3d13a31d1b0ccf33188c41780ce65e34c89936154c25a41f0713fccc72b8a56a0634c345dbd57539d0a4387b60e68210d02fe10135ebfcda1e729134211cf2e9aa53929cc085368c27f1a60f77b67c2f827d9cdec6342917fc3912ab911abd021d7784feb44086f650d33454d1024d61ef433e3d567149535e351fd46651f34fea0fbf5bde860e4aaf04e3e9a8c40494f9add14eeb098e4430f974f7c72275d0d139ade84bfc99f554173e96f4f8930f72e3f389ed9e489e2dc281489a768d02276b1361403334bf2a09a910c6ca10d276e39ace8e9438bd68c4b7000066e86df544d8e80f083e84470b48282589bbb402cbfa1c0809ac435260d13223d68b614fad44a0f34907d8dec8baa79226bdfc800548cc1f36d9ab873e0312187d33511a3912a68edc0e289784875f8aeb7f6d3d491018a40477b90f844447737b9ea17df65e6532e2d0fe71cdb21b63a7b013b28b15b3ca51c90fb3351f0f77f8de99bb1dfb41c6423e2e3410ef378a0a13770038a7e5523b25911ccdb08f69bcf94735b18e65c7859fa46ac9f1f00a74fca0e20ac92849b89ca896119457d0530801c97b7229fa5671c26e8b143ebb4179313e441bca4d9718139dd9757a37436820082bd7f24a8ea04f2412cf51bac402f71714cd43cd4cf1e59f7457460cb0118da634f0ba20e4ec0ad11955634db5a87652be0635e19698ffad1b6b6de00c5041bdfe0c1d6888d145308ea535f28573f5858c93a34ee0f67b6749bd2a4bbf1ce1199251ecb0984244b03a50e49d7f931671d6b49dc130b5384c353e411b0f6739ca80b432943d744999036fab7880ef0c865aa926de911d0e7d68abfd797983fd3755a830b08984d19bf4ad1bf5c63d9722f13337776a51454230dd61f02f6429abd38e83bac775064555392175fbcdd97726b2c441c45fae16fc0e130d0d5e9704749799bd7034b4aa3c111c1e5c828a7f665a386e237e6e0b7136a559685396a8b332c01ad48d78e6c22e468c74a5476346693e7393e20e8433f735a3ae03ed06c6709bd9db97a0fa836df01a01450b3b7773dbc3af391d0446112c95c39679a0009652328b9bfd16eba25066730bd335b177f9bba126ff17c1c74fac7f87ab5098fde3e673a01075005a73e46c8193d4b450d070f945bb09674a514b75dd885b5acec3a60fb50c33846d63cad6b369f5c49cbc3c3070c6ba7a45837203e23eb9cafbac6fd669ebd728003e14377614027021c7679a351c0faf06c599391757d04597b2137592f8d9c980585d6f9ca172bbec22883280748a999cbc9d049d4bdfc58bf5a722b2d17bc90771cacd1101222a2851eb767fe7e9b94b8914ecf64d987aa8107a9c51b27efab8b0bf6cef53cf50a8850b3075aa469751980375cbeb08e1ac30b403384cc88623f1aa905ef5f7cfeeba4466843db28eeb3e5312131e76ad917e32357197982884cc6e0ef4d4cdbbdae3e95a9f29c68c55e9a3ce9303ff0da3c2885bf04b11e7138203bf66aeb01deccb30e8694f84dc566723f5ea37c8c57e81c56d0426c46eca8816f3fc30366180b05a4f0f6217aef24d602b18715801e1f5351d85b1556fa03808f5f967bb4d7e4a8d5641d12594525bfd31188fa6545ce25fa9eee5466083a4352c4f993e84d368f2d8addf3e180aab67b4a9673226fe705ffc8c2987ea35053d8c11139678fc5a86b431303a17c680fb5eba5856da5ae8eb70481bec96c5414f4284293ecba21f7adbd193e35c5ca8e023968b274dd4635c8036caff8fc8c783c15f3301bbb5edf513b15f48d6a930ff0937636a9f599c2a892b2e79d39af99ad59c8274d0d60f91b0937d18ceddde24b195ad98008be5c", &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200)="4d2d26e4916064a684c17566a5a747f091cc730179c6d6530b9b6a6c89953d2e2cc7068790115af4ca14230fe7a087cd58b505bbd7dac30dcc3b33be63c164dca0f58c06bfe5e22d00b9da65c0c9d731caf5cb790914a00b92154be3d76c6e1801836b88ec4fd440724dddba564f85c80c1cf1a02b4aae3fd488978b7d4e163ab7bd5722b2e9f3bced32ab0d0c33693dd7db7092fbacaee92156c30f0a008584a55dab86162bcd88891b283108c57bae35c5e8a66aa546ed68db5950dc4bb6") (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x133}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="9ffd", 0x2}], 0x1) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000001540), 0x400, 0x0) (async)
fcntl$dupfd(r0, 0x0, r0) (async)
io_submit(0x0, 0x5, &(0x7f00000027c0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)="9002a9eb722faa2fac7578f0d943d53eafe2d2b064bd2be212f827b8787b340bae377a2960230f191f96f40823b681bc0ad0dcb1002a2a3b3a317637ffd6bd69283e996972e8486aeb30c2e3f5157ed74623d177cfb9347e73c3c92b68db2c288ea3adfcc29571718e", 0x69, 0x156, 0x0, 0x2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000001780)="9920fbabbc8baaceb7834943e7911a6c52b9461d574421f17be8e7036069cb53330052057a9615da21b165948415358751d9dbb3d5062a9df63df6f5c4379fc297a7506b8b30ac9beddd6a54ded5065ee4637711113fea149c19b33c562d0a814917bc3406adab54dec60f07debb88d01dfcb07d49a188b23fcf811fd7c8a0e47dd50acf90c415eb5ed68655a1388eb726aeda30371877ad29c77f9ebd2b1a8a67d6572dcd20859368d7a624c9aa58a60a37e40ce3d7a278a22e3e2b9f6f31524665a034ac1469c48ad63e11d3254150fa0b4ba233d1c616dd503635d1a1f7cada3c6a60f9aa219dcf1800646287acaeb0c6c94769e380638435aec3b5439eead743866b3fcd6b97e3f0fce962ab941011b2a79bc30188d4f4878867a4260deb65b36d7485ff49cbdacc9c8f543f3940e24d75db2a7c0de7d02952c79364d45a2dc0fb7aec2c4971add14d3e20a663813515ef85aaefc3b6543a4c8937b09dc01995f8cb765887baf06c9a49f33a71ed31a9bf49f05977f43c0fca7b412b3eef6c7ba4532e9621d0fa826a854e4666ed268427baa4154551757a0a3245bc652cafc858f283ab5f79ba4bcfff0e7f65ef7906c50b219c914380221b4e240e0c96ad483fe43764ae9bd8d8e54bbb4d8a886c6b50790159287fdfcbc76d89f38619f8f4639c85c7de8cd0d16d47f11ee7fe8a27692c7ee447693769f61519d318de1aab060e0d244b8fdd628ced048f39ea8ea3c807a2f26f60379b6167a616366cae2133eec9143be5fc6aa1195e3cbb7910d54913c15da3a3d001698c37542b1cf149927bab79a30b70ac94e858181a83807b20baa421f0578de1a86134ce98fca231c0ac1155bd7b399d7e341a521cf07a5fb25010984903a2d76ffbb3bf8ea4ee83af3adf053498a5a1a44f9177b290c9482f7a595933180df1782ebded09fd9477f0b2ea50b1332fdfcee8074b1b4a9026d96a316ebffc926d88262c1901ae06363bcbb8ccf06f099029f909addf2a925dc68985bf16ed6a59f7bc135c32075d763be03e17458755652068a517aaacc8d2259bb4fc750754506f2b730ba94ed4e254364d0377af40de8ebfc071792315ffb7eae5af9dedbd1c8d2b5c35e27f4f2ed8751b0cb7f93675ac358ce7673059f8c367c0902b183533a073bb560695b57b3643bde2fa73bcd066cc13e303dce2bb90fb5f2cdc28401f70492bf602f1c706e6608710b9d4488acb0b0cc8deaaaf49cd84ae992ab202c104225b283d81a4e7d3384f596324d03e67c43aec0070f2635fdab7edec04c1f86937b366d2df50c5c21ca6a3cae0e95b2f99d5206f3f1284fc9ba2ae06066e7c690699a50c34df88f250c2b928b0682db77b609e063258c67f2c252fc12d7fd30c6b24489d4ca537b1f41fa7901070d5df46027949588c8431e0f58469bb015f9766240b445a7520c4a94714762f53234f7eabd9fb235599ed75d2de46f8d15b2db3cecc07276b55e3ef4e934a75c6a3674879e6bd4eeb9fa8dace448b96c5fde3352813015f25bd95482e9e1cfceaa37a9191a35491bc1ea8b427054c32dcb3e57f9f2bc11e87e9c99d1faabbba8acd0c74d964e19095900e8952f670f16faaf1712243358ccbe2389799ea7e271da4db635f16a14e57edfb9595f2fd332539cb9e196509f1b984df0b535bf95db156e0c250cee9535a7080663e97fb58c292bc64676d1d1170d3310df0602940a4ecb08458b595869492d802e80cbdca88d8286a3aee42f4b608005f3159c867ce23229de2d7d86794d5b10b4d53bf9d02e8049c340c77ddcf7c371b30a7b7989bd0489fb23f56d4814f8af6170710099ddb4a7b97ac8802599165a642c34e5088fb553760adf69a8532de69af6481b5cfbd5f7aa4abee1bc5267fe6f214cbe1fbe666894dd3c0ca314b584a45a3a6714c5acfee9d3bf228741155f5b89eb58c116b72a6f1194ed71d3fd3af4dbc9879d617f868aabce330bf6e05299509f0a6661bdf7e5989748f858f49f827c403b35abd1796b966ac57c98e30b9789066b9038c06de821c41ebad4a7f3e373083397c21a00cb852c0b15941d00777f76b43e28d9dc92d4518cc5a3e58dfa61b132b02a90e0bac9637396e68ca285b4c308d09ef9c63573a5f345815e2b84d1e5d8960385bd603b5b7292c56f157ae1834a8f83181d9bda34b8a61cc17d9c937ae251404d6e144bf74365c73a04daf3fb779375556aa199edfe0c8d9bd8ad504f1ce249466797ffef99cd13627fd103f75f18bae0462f4ed037a9ff606756a5bcfcc41934c8a95912e36eaf6f49f5ebbd3f9959bd87ac7995e47c2618728d4ff9787e83f1e4173f940ba2c002e214298325e1c3e60714e680acfd06748d46e21a0b5a44a5108915ae89a4c1bd8789743c0ed57d54ea93a0df86876724358bec4c3436ce90ca50a433bc9d477e79fe9f3eb0e0688967a7199e3554167ca23fee7e8daedd3ffbf0c62d2e3af93d5f1ca254230cfdd0c6e224ee48f2769fd601b597f56c7d48eb5c9602c18b938213513467b0fdf41faaba5ed08129aadbd2feea971f63bb596e847dab4bc5d93da073af3785211c5882f97da4608c8357689596d0a3f5160bf91995c9395e9c938efe39d6bc0f24732495158668d7182417451cfdd77da8f4b386e6bcbd3f6d711371d21f46a9d8932ffcaeb65af8575ec0ca66fc571d4df1770274f9bb7d92707c9ec23501f823e767fee6a93c6ed0a6ade86c44e011c7bb8051d3d83d0f54f4e3ae839039c9b0ad49fdc522519e5a5651d1c3db50d4726c3ece42c366c79cb68fbf67351d5aedf90febf591b5908a826355c816cc226fff0403655caa2c34691602def8e4ff6cd52594881f15873f98bfcb6cdd99dede674c6d4cea5ae1e582276f0811283e3cdb310d20b4cda62387758669780f8307f4db3fe659f62536ab434275aed5384d97ec32e5fa60ffab67281234d1e7afb20d134c5cf13b470935ed1d58afa142fedc317cbf891ebabcb81850d4127cbf84e1e36fe098193e463d9f08d8578d5a95b6808dcb9f52da00eb0db6fcb47096f736b77be3e21c22325c29c4c5ee9fcc62b8a310e0630649096b2ddcdddf274b4e9b7f67de80664fc14087a1efcb6d9b020deadf321b723c6fcc5b896b806442fe89569300a880f10da45c4d9f0364aa820a08b854274f9cd00f43cfb8efb3a14cc2103f70014475a36c969cd8ee0880087713fa841249a0a0c1aff81cda4329948d5e3b4311b3e734b71224076ba30733c8faed4cc371c2061b0e13bb4c57f6def73bd540ed421514ad8604c51a58781c6f9be4de1bbe0c91e8eb31c0f35da2784988b26014355a2cfa73ca6667dee57088ef383aa5e3b1e6ef3792b55e0c2e8bda38c78f8114a23cc0195cb8950070df3f9c323071b1b40a292c899fe7bb48a3f44b0e2907653c07a15ebcee81d59cef7a303510447eaf899af1c09569d3a5c86bc248da19c192ec985957b399de4bce632094fe47677e63e89594afb749068fb594c18bef5aefad834e2da8a23a4cd62e75f5496b90d85fce6ec349e610b2abf90c8da21fa4d21d5cae0604bad7d788b4b0f6d8ac60152c4154f2d1b90fd04b98c8e7c2c111aea58470339846a403d6de7b136d94b01e3d8698e60f5830256362974da0a38b1e8885da7558c89735ffded32177067dcc9787f35e2b914cb867107301317847f275b7ebca2aa5e2ba77adde10c1859b64e2ecb5e0a7f036ad5ccce62c229587d9341e4e4fb3dd9c3909cce7597c5d274839b25672c4b8181875aa6f829c3696f86f5d7b9238652008d0903720f89a0700a33fb3938ed6219799f2c69d265b9b77d566b84a6046bcd281f9d881d1f8d48e4b04e93d7a3059632da1c3112d0775adbc02e16dec2d11debd10335060eec95bcabb4a4ae2293921739daa69e7659dd334798324a1d9b2836b5f09fcf0a868be4d3b398bd52c061663081c9f874efc2155a3f334ce3f5401de26680b0344fd816af11ddbb40c99a28d2d718bbbee95bdc299d437e97402c22f7c2afb64e0406b1dcc5583550c79d408001e5322bb7c11293e14dc4c3411452f8b1b07137b28e8b425b008a47dcf8747d5e91122856cc01c0500bd4c4af76a7647aa22ff94578de43221f98c0bd46b3045923836be623bf5cfb72b9d1d203488119f4d9e4a4338d15a8f3c958617a842594297352de4240b270a29fb6dcba210893af1331a1d72670d096d986c6538bcbab16802e69b115e6451a1d27aa12892c9e40382decb7fd6d89c7155a775c5d3081e6c67c62ac10d296838ccc7b6289bb3c2baae5605276e263a189e858f7aef3d97e406b24b5546a692fd25b377c489939d0ad6eecd6009eb3892ec0735d3b772f7f3fa5e34ab14b92ec68dfe497fc10322baf75cc6e57c215d1e1e0a36becb3c09cd0b19c25dc7cbc25a4e2ce3f298c8f6e70f92c0a8628e30f6954c046cddf872edc83519ce7d3469585f4871a665b2e946a5d293aa56b4eb10158c606add0d955ad68aa2e013bea78ac21341c44a0377093eb47b09c3e91de2bcd9d59744fb12c0b5d63cb8e0bd14b9d278409f46107a042cd092d700c107a21a321b186f06a56d86bae34180a54cbd3b24a57f0594143db52a3ed4c3a4e71659ea8326d3024c703a19d72add427ac4e685a046561a2906f66ed6cdf0c0bcf70efe5f502b6240f91639ddda9e1670aa5f4b681164c7bf69dceb40965a3fe40d2d7f1695764ca4ca125c9c7972eb5924c00de5f2f3fac368d2b3a9ff566f0400ffc71fcd0d7b6d0a2085200b6f0f560ef7c08d920dd528fa7573c80f88f147a7865443570ab5688e25fbb4164c55b2ff35e95dd29345f37622c5c684bf8b002d64e8eb0ec3d74ea5253b9056342aecd484185e9fe6f7f8fa4b16e5c0ac69420c873bf749c45856a9c4bad5a437d8c55a16de2f05226ff2364bdecef0eea0c5b927a20f88753f21ac898990bedc118e43ed11ac81600939a4f1ee48d783b2aec8b91f9fd5b497dc4aec276624947ac074338a2f0b38624feaca7d42a8855c7f005b0e3df2af98b16e34da92e1e4faeab854ca907fd96653741323ac34d797841906c48414dc262fb25077fc9efabbd1b677dea7b95f5a4037a8eddc63421f6cbedc35c3c8fb02573b2efd74b728ce97c0c8a5ffab80d0360b6025ac8e31a917f494874b7cdfa5b93fbcc0c91eb61bfe6d5afe18dceaa7c03f7ce36bce0184e8aef67bcd15558b39edd46760eb4dee519e1bae58bc01e6923601fc210c8791490adebac719cbe0c504140d64bd8c7eb390297b3e8012cb4f563c8553382268df5aa61b3b0cfd954dca7b659d3c2547f914f1a948654b6e75d78f2d33f763c73193d05d7c799ef564002fa4ce5c863b3d70ebfad3d9e93ba10b0f67212a0db26d7d5e192164065b3305b1073633659a1651889bad840319acde3ec7b1a3a2ec9cf4ea6fe2ff768ec3ea3ef6753cea2444cf3dbc4389b8e063e4dc8f4cb033d1d23ba10af57abbabda8a417018a9b5cce453447c7c19d324194daa05cb7577e5c5a6cf28061b1dc1d94c454df03aa4a243774ffc98b0348f0f961afd57235e9a291bec71838f299f61d29c095cdeb96ab9b8acdc7eb10018e41c918e66c74a41ef41652b7b66277ef0b2bb21f7800bdda040db5c5cd4eef4db4a77ec1cfdbed41649e47cc239357b497551f0abaf8de5680543f3fdce42f11b708031fa5cc735755e0ddca81c4c8a03ab131f737812409bb5bc2eed537187ffaf2715657ab5d837c4ace34498324fd565c5d51b6", 0x1000, 0x6, 0x0, 0x1, r2}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x8001, r1, &(0x7f0000001580)="53b500c32a3e13b045605c5c0163ded0b8694f794289e062", 0x18, 0x4, 0x0, 0x1}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000001600)="4d66441600e178c41df204090ea942ae2e979c71ab06", 0x16, 0x9}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x3, 0xf3a4, r0, &(0x7f0000001680)="923d234c816c93c7aa834880b40fac319ad4171380d59acd0f5bab668bdbead2476845e71011943598cdeefd7f11d483b18d3810c5698a9f2deb00597342c0b196b5b7a708348b944468c03ac9bc2f1e97968613feb73675371a601fb190d3dd1c22db28f868a0be911c30cf471bc2d7cdd4034d74bfd6f71290c45539bc6ea64f6b500e7830080386cc0536a96c454242d0", 0x92, 0xfffffffffffffffa, 0x0, 0x2, r2}]) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00db0000000000d6fe4ce0fa9cfaed8a264cb7ca00c1"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

[ 3106.373090] Node 0 DMA32 free:38232kB min:35996kB low:44992kB high:53988kB active_anon:824772kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:628kB local_pcp:328kB free_cma:0kB
[ 3106.403645] Node 1 active_anon:157936kB inactive_anon:100268kB active_file:16912kB inactive_file:340456kB unevictable:0kB isolated(anon):3840kB isolated(file):0kB mapped:91984kB dirty:976kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
15:31:21 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:21 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x0, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3106.470235] lowmem_reserve[]: 0 0 1 1 1
[ 3106.474388] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:72kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3106.502447] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
15:31:21 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async, rerun: 64)
exit(0x0) (async, rerun: 64)
clone(0x4000, &(0x7f00000004c0)="9a7b22ff768a4263696fefb07b062266ebf316e59c18d08ec0830ebc5d5876fe2896289df2167f795e13a0f5e01ece5e78dcf1649a95db9b7f35f0b747718330765a6b73c93826b20d475ebbac81d50abe300dcdd916dbe3d843da9d3ae09575c19b66404d23c7227a5d1b4fe1df3d0f382d27a34eb8857cd34af0ea08bb24e0926d3ee95e98836eaf791cb771b3340d0a0effac43e72ddfd474c6b8743628f40e2f1fed89c3282329c08da7c70098fc60879c3ca6c86627fa203734b01f03c5ba5ba292fc65a94697945d3b1a6f690df05ca40e8721260530a0c3bda7895498b6f02727c624374a7410a254af348bff629b2cd65c995f26bcec029b0708e82535c3b9a77508f7e8a222ede1b6fe814700663e51fa45c0e0930947b3127be657de48054e6dc7d3a9f300878b09768688ea436883855242799805448fae54c4c3fb404ca5180e5b93a15779f7cff5f7fb5ce2b605ed0da3711d9137fe83a61858553d4183f0e87218f49a64ccd75971e7b074e6ff844fb0dc73a92819cdf320789d8ba9bbccde4dc03b44b22b28fb349b43c26b5c4ece23c0f1d4277639de18d679e22cec196047a599b3344271535dbfb338d37b31710c818d5295d731bdadf79d4a66ac0af235696fb5d90d11716891351b33349bff184559cac5376a9d907f9cb4b2224bc69603e18ca3eec0f355ad979f51ee8153283cadb49e9e6c841f8e43baf9c583ebe708706d8454cf882da53bb67b73b68cbdc2e0a4df7d17bdb2817257d3b48533155c8652fcdd65bd459da972c988bcc21c50a57c8eecaedca7487a14b80c7de228bf4efccf22952daba774895206e58bf3bedcb187d8efa64392767ee12c902f710ce00c41b205a60d034b6b22dd9bc176339c0256c1244e579a7ed911d81603c90ff0139f08379c5198558ff04351a879cdf62cfbfa9dab2baaf6af353495748031074f8fd4f70ee8d60786af0503f4431fe973506e2307c91f5a1979209ef99487dfa9a277b66fcde625c5edb564906e08b3609fe2c83551faff730492cc1f6dc7be768236ea9fab9a8e9c61f60a78a66a77a7451724e9e764ddb78ddab2a97651fc3a5b669f05818015dff69f8dea13e128a8a23573d24ee801dd4978d860d355573ee0f9ed81cba2dd17655ad5ab3845fd490fa366ba55fc8ed19a8facf30c906047d13e2139db09e4a6ea14a5dc09e5ac5198d72b7e53e06a2e31c70fdc7396e1ca933dd770ed44f8b4d0dc725010051628bf532decfdeb4c50ba8fa46f6a6a33238d5f37abd642dde65c962b597d611434a34d5dfb5f4dd9a1350951ac3c1b247023caef95a7888cacb4234238e69dc23e4e137b0f673d14480a9fed750c37b94d4028c794ef79944118fd704fd6083107c26f6ad6e86a72ce80b993b151aa4c668bc7ddfdd194bd6acf5360f0df5e9be6ecbb140375247dba887a56511e3f1dabeab76b82a89b9db032bf4cbe2a04a492128d244dfd1eca7c8b0091c353829602b5b3a6dc6483043411e578f0a52c201c764b977d0167579039b0216baf19d1a138d097bb68ed9cdfbf1be2d52fba44ffe63ec341c81ec3dd6b6e008ce5795331a5676058238e97e6a2e854cc9e533bc047abfb89f2609bcc68550f88ad975712052511738aa65e15d87652c1bf10e7c2103c3bdff4505696f3d9795418cb5de457397b08a2d4d62ba71a94456a18cdab48137033271d076ed94553b444c7aa03f153b98813b2a83626a56064a8a83a100e64761f2f6d52a61a2f013a5ec71bd00ffa0cbc6f3df96211d2620c7e48d64761297309a7c843f39f64c8e121e7ae2bbbe3cafdda7daa2cc08b6e9a7108b36d1a0dbe34a202b416d1d1b8e14609ad4609c8fdf13322e3b731f09100cb07e236e47ee9f8d664f609c6de04e5b864a2a25260ea42188f04b9864429c7d626c117b85db97f2045a429b971c459272cf5a066864444c2defeba7df958136e0e22f566193aae41246be05e7a482722f5921bba342cc62ccf7700263e0148cdaae067b66ce067701878f8a5856a5f512058b900317617e8d8f741aa98b68239c51cf6bb82b7cee90d0307f3b6f607db4be360e91f845e7720d2d74a4b9563b95bf06a571f3fb6745f0363c6cb15cbcfdcccc86f46104d610d54ae3d45887e9b72fcbf1e6cf56c0949df2e6b627e9e28a3b8fa1251be1a913474f816e29cae7fe326fc3e37f2313aeec6b4ccae017bd22a55f396e1a2aeae3743cd1442208fe9771170b6749ee55ba5f06471c4a1e2aa186d6efec17bbb8c94cfc65c27cee444544b8e5d67645f66954a8d33dd954707f4d2abce24e0621abdf6d6e80630ef5eccbe072d8ad341638c5b89bb0ebcab960510d8a90df59f3145597dc5d66bed544212086651b12d2e8460b1b147aab0629f4b19384d2848540cf73713875b9a19961f3ef7c4723e36acb563afaa259cfc8df6c25d1bdbdb5d80f3a5f04783955b160c2a0be4a976be13ec3b2d5ad343fa116df6906892c95dd275dcd9198cd4dcb79edc04ab25049db8a34788b79aa14af95653f899759841e0748749ffa7e9b7f54f010d8284e63898a34d3d6a96e1762ae7184ff7c006e3e325ec5a2d13aa240c3b64580c01d11c01dd5efc157d7f560547206ac3300e2355070136d4d1202a8060cf9871ca2383d0876f2b2408f0ccf27f067227643edd11c20b18a278074fbb62ecb98c588264cfd4c8a8a1e876f90b12c8d02b7b076346448d794c0f88b2793bf5579205cc04284f1f5bcabc2451f7e565695093c9bc323de7f5da0f80d723b60476f2cd488ef835b1a9d8e183c60f3785c53c08341d3466335d08be94ab1f825ddb98ca1dffc9615220386fa68bed32c65e37aad6463613127a2ea2a1eedb79246270cf03e2d5ca1a624478def534709f0e7ac30edd94fa4ee03f39d46667ef12d6af685ea644e8683e3f0783349a56382191e1fc060a70ee99d3ce503c66943e378fad3465e746ebb770f9e386f0d4aaab695962de70af1aa3859418f153c4668d602f395702847363b572fac4e37a7220568b5c58f8c99e51c8d388d4f2efbd3d64599f2da3c68fba1a1d4b31a5aef8ce5b3a07b9a89ce80bc931d1ee0a7cc93c6e10d7ac53abb6521b2fb9a020e839b6d24e9260d3efab462aaf01789c8642cdceb0fa5f07c071c48b221674aacf84295654e80685cf1eb7dac83f4f85176510987d6bc178be21421ab35599bcf72c6ad138fb63594627288b25c4e99df699171065d95aa6e7c55a24de054039f5b1718ab9230fd90ddea2bede92751572686381b9f9bb93f8aaf906dc36615c294d2eb28ac5de99e9d8afc1d4629a41c4611cca089f0ff3469d486c17c961aa5c24a7ca590b07dbc420044345d59a25cdd956d06ef71b82b838d13e26de1248a7bdff02f87019cc89cd720b9e29ef13e488f5a53dc3f5fb450709e8aa49b2bb0b3fb5fd6a3c82528f21bdcdc441586d0a0704cf2d5708970699fd884887d6352be78c6c7d332db455e28a233c5a3a00f080ab81f6d263e8431acf4f1a7bf4f8a3f86a310c8e0b2112d9133d9271d1d696881181d9b9b7da4e78bf9f51c14b624de7908b9fe1b20605376e51a266ced4b14ebf709d3c24b278a2f1e5b077bbce0260e9abda220c978edda069a5b628f63e6ba33fd3481c458ab7b68441a5a1ac9b37a46bb6d62d22c655b2b79a8855e4b905e6f8d08a8f40eb0a101f685f50cc072399c7a04ed52306c0cceb0e05a5dacebe9576cd3be0d2f626647d223a090ac4db5419df4b8c15d099780b128c45025b7d6c68609eb40134c70d7a8ed2c4454b051ad6a143ce66eadedbd738e7af47fa42ce6332d024c93e4791b6b04b322d17b5715d320cc7b8b2aa1e92a13adb9b9bb847bba6d436b227b997fd1d003db57310d736de4eca2c8695e2a3d8ee6ee3b6e15dc3d13a31d1b0ccf33188c41780ce65e34c89936154c25a41f0713fccc72b8a56a0634c345dbd57539d0a4387b60e68210d02fe10135ebfcda1e729134211cf2e9aa53929cc085368c27f1a60f77b67c2f827d9cdec6342917fc3912ab911abd021d7784feb44086f650d33454d1024d61ef433e3d567149535e351fd46651f34fea0fbf5bde860e4aaf04e3e9a8c40494f9add14eeb098e4430f974f7c72275d0d139ade84bfc99f554173e96f4f8930f72e3f389ed9e489e2dc281489a768d02276b1361403334bf2a09a910c6ca10d276e39ace8e9438bd68c4b7000066e86df544d8e80f083e84470b48282589bbb402cbfa1c0809ac435260d13223d68b614fad44a0f34907d8dec8baa79226bdfc800548cc1f36d9ab873e0312187d33511a3912a68edc0e289784875f8aeb7f6d3d491018a40477b90f844447737b9ea17df65e6532e2d0fe71cdb21b63a7b013b28b15b3ca51c90fb3351f0f77f8de99bb1dfb41c6423e2e3410ef378a0a13770038a7e5523b25911ccdb08f69bcf94735b18e65c7859fa46ac9f1f00a74fca0e20ac92849b89ca896119457d0530801c97b7229fa5671c26e8b143ebb4179313e441bca4d9718139dd9757a37436820082bd7f24a8ea04f2412cf51bac402f71714cd43cd4cf1e59f7457460cb0118da634f0ba20e4ec0ad11955634db5a87652be0635e19698ffad1b6b6de00c5041bdfe0c1d6888d145308ea535f28573f5858c93a34ee0f67b6749bd2a4bbf1ce1199251ecb0984244b03a50e49d7f931671d6b49dc130b5384c353e411b0f6739ca80b432943d744999036fab7880ef0c865aa926de911d0e7d68abfd797983fd3755a830b08984d19bf4ad1bf5c63d9722f13337776a51454230dd61f02f6429abd38e83bac775064555392175fbcdd97726b2c441c45fae16fc0e130d0d5e9704749799bd7034b4aa3c111c1e5c828a7f665a386e237e6e0b7136a559685396a8b332c01ad48d78e6c22e468c74a5476346693e7393e20e8433f735a3ae03ed06c6709bd9db97a0fa836df01a01450b3b7773dbc3af391d0446112c95c39679a0009652328b9bfd16eba25066730bd335b177f9bba126ff17c1c74fac7f87ab5098fde3e673a01075005a73e46c8193d4b450d070f945bb09674a514b75dd885b5acec3a60fb50c33846d63cad6b369f5c49cbc3c3070c6ba7a45837203e23eb9cafbac6fd669ebd728003e14377614027021c7679a351c0faf06c599391757d04597b2137592f8d9c980585d6f9ca172bbec22883280748a999cbc9d049d4bdfc58bf5a722b2d17bc90771cacd1101222a2851eb767fe7e9b94b8914ecf64d987aa8107a9c51b27efab8b0bf6cef53cf50a8850b3075aa469751980375cbeb08e1ac30b403384cc88623f1aa905ef5f7cfeeba4466843db28eeb3e5312131e76ad917e32357197982884cc6e0ef4d4cdbbdae3e95a9f29c68c55e9a3ce9303ff0da3c2885bf04b11e7138203bf66aeb01deccb30e8694f84dc566723f5ea37c8c57e81c56d0426c46eca8816f3fc30366180b05a4f0f6217aef24d602b18715801e1f5351d85b1556fa03808f5f967bb4d7e4a8d5641d12594525bfd31188fa6545ce25fa9eee5466083a4352c4f993e84d368f2d8addf3e180aab67b4a9673226fe705ffc8c2987ea35053d8c11139678fc5a86b431303a17c680fb5eba5856da5ae8eb70481bec96c5414f4284293ecba21f7adbd193e35c5ca8e023968b274dd4635c8036caff8fc8c783c15f3301bbb5edf513b15f48d6a930ff0937636a9f599c2a892b2e79d39af99ad59c8274d0d60f91b0937d18ceddde24b195ad98008be5c", &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200)="4d2d26e4916064a684c17566a5a747f091cc730179c6d6530b9b6a6c89953d2e2cc7068790115af4ca14230fe7a087cd58b505bbd7dac30dcc3b33be63c164dca0f58c06bfe5e22d00b9da65c0c9d731caf5cb790914a00b92154be3d76c6e1801836b88ec4fd440724dddba564f85c80c1cf1a02b4aae3fd488978b7d4e163ab7bd5722b2e9f3bced32ab0d0c33693dd7db7092fbacaee92156c30f0a008584a55dab86162bcd88891b283108c57bae35c5e8a66aa546ed68db5950dc4bb6")
r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x133}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="9ffd", 0x2}], 0x1) (async)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001540), 0x400, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
io_submit(0x0, 0x5, &(0x7f00000027c0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)="9002a9eb722faa2fac7578f0d943d53eafe2d2b064bd2be212f827b8787b340bae377a2960230f191f96f40823b681bc0ad0dcb1002a2a3b3a317637ffd6bd69283e996972e8486aeb30c2e3f5157ed74623d177cfb9347e73c3c92b68db2c288ea3adfcc29571718e", 0x69, 0x156, 0x0, 0x2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000001780)="9920fbabbc8baaceb7834943e7911a6c52b9461d574421f17be8e7036069cb53330052057a9615da21b165948415358751d9dbb3d5062a9df63df6f5c4379fc297a7506b8b30ac9beddd6a54ded5065ee4637711113fea149c19b33c562d0a814917bc3406adab54dec60f07debb88d01dfcb07d49a188b23fcf811fd7c8a0e47dd50acf90c415eb5ed68655a1388eb726aeda30371877ad29c77f9ebd2b1a8a67d6572dcd20859368d7a624c9aa58a60a37e40ce3d7a278a22e3e2b9f6f31524665a034ac1469c48ad63e11d3254150fa0b4ba233d1c616dd503635d1a1f7cada3c6a60f9aa219dcf1800646287acaeb0c6c94769e380638435aec3b5439eead743866b3fcd6b97e3f0fce962ab941011b2a79bc30188d4f4878867a4260deb65b36d7485ff49cbdacc9c8f543f3940e24d75db2a7c0de7d02952c79364d45a2dc0fb7aec2c4971add14d3e20a663813515ef85aaefc3b6543a4c8937b09dc01995f8cb765887baf06c9a49f33a71ed31a9bf49f05977f43c0fca7b412b3eef6c7ba4532e9621d0fa826a854e4666ed268427baa4154551757a0a3245bc652cafc858f283ab5f79ba4bcfff0e7f65ef7906c50b219c914380221b4e240e0c96ad483fe43764ae9bd8d8e54bbb4d8a886c6b50790159287fdfcbc76d89f38619f8f4639c85c7de8cd0d16d47f11ee7fe8a27692c7ee447693769f61519d318de1aab060e0d244b8fdd628ced048f39ea8ea3c807a2f26f60379b6167a616366cae2133eec9143be5fc6aa1195e3cbb7910d54913c15da3a3d001698c37542b1cf149927bab79a30b70ac94e858181a83807b20baa421f0578de1a86134ce98fca231c0ac1155bd7b399d7e341a521cf07a5fb25010984903a2d76ffbb3bf8ea4ee83af3adf053498a5a1a44f9177b290c9482f7a595933180df1782ebded09fd9477f0b2ea50b1332fdfcee8074b1b4a9026d96a316ebffc926d88262c1901ae06363bcbb8ccf06f099029f909addf2a925dc68985bf16ed6a59f7bc135c32075d763be03e17458755652068a517aaacc8d2259bb4fc750754506f2b730ba94ed4e254364d0377af40de8ebfc071792315ffb7eae5af9dedbd1c8d2b5c35e27f4f2ed8751b0cb7f93675ac358ce7673059f8c367c0902b183533a073bb560695b57b3643bde2fa73bcd066cc13e303dce2bb90fb5f2cdc28401f70492bf602f1c706e6608710b9d4488acb0b0cc8deaaaf49cd84ae992ab202c104225b283d81a4e7d3384f596324d03e67c43aec0070f2635fdab7edec04c1f86937b366d2df50c5c21ca6a3cae0e95b2f99d5206f3f1284fc9ba2ae06066e7c690699a50c34df88f250c2b928b0682db77b609e063258c67f2c252fc12d7fd30c6b24489d4ca537b1f41fa7901070d5df46027949588c8431e0f58469bb015f9766240b445a7520c4a94714762f53234f7eabd9fb235599ed75d2de46f8d15b2db3cecc07276b55e3ef4e934a75c6a3674879e6bd4eeb9fa8dace448b96c5fde3352813015f25bd95482e9e1cfceaa37a9191a35491bc1ea8b427054c32dcb3e57f9f2bc11e87e9c99d1faabbba8acd0c74d964e19095900e8952f670f16faaf1712243358ccbe2389799ea7e271da4db635f16a14e57edfb9595f2fd332539cb9e196509f1b984df0b535bf95db156e0c250cee9535a7080663e97fb58c292bc64676d1d1170d3310df0602940a4ecb08458b595869492d802e80cbdca88d8286a3aee42f4b608005f3159c867ce23229de2d7d86794d5b10b4d53bf9d02e8049c340c77ddcf7c371b30a7b7989bd0489fb23f56d4814f8af6170710099ddb4a7b97ac8802599165a642c34e5088fb553760adf69a8532de69af6481b5cfbd5f7aa4abee1bc5267fe6f214cbe1fbe666894dd3c0ca314b584a45a3a6714c5acfee9d3bf228741155f5b89eb58c116b72a6f1194ed71d3fd3af4dbc9879d617f868aabce330bf6e05299509f0a6661bdf7e5989748f858f49f827c403b35abd1796b966ac57c98e30b9789066b9038c06de821c41ebad4a7f3e373083397c21a00cb852c0b15941d00777f76b43e28d9dc92d4518cc5a3e58dfa61b132b02a90e0bac9637396e68ca285b4c308d09ef9c63573a5f345815e2b84d1e5d8960385bd603b5b7292c56f157ae1834a8f83181d9bda34b8a61cc17d9c937ae251404d6e144bf74365c73a04daf3fb779375556aa199edfe0c8d9bd8ad504f1ce249466797ffef99cd13627fd103f75f18bae0462f4ed037a9ff606756a5bcfcc41934c8a95912e36eaf6f49f5ebbd3f9959bd87ac7995e47c2618728d4ff9787e83f1e4173f940ba2c002e214298325e1c3e60714e680acfd06748d46e21a0b5a44a5108915ae89a4c1bd8789743c0ed57d54ea93a0df86876724358bec4c3436ce90ca50a433bc9d477e79fe9f3eb0e0688967a7199e3554167ca23fee7e8daedd3ffbf0c62d2e3af93d5f1ca254230cfdd0c6e224ee48f2769fd601b597f56c7d48eb5c9602c18b938213513467b0fdf41faaba5ed08129aadbd2feea971f63bb596e847dab4bc5d93da073af3785211c5882f97da4608c8357689596d0a3f5160bf91995c9395e9c938efe39d6bc0f24732495158668d7182417451cfdd77da8f4b386e6bcbd3f6d711371d21f46a9d8932ffcaeb65af8575ec0ca66fc571d4df1770274f9bb7d92707c9ec23501f823e767fee6a93c6ed0a6ade86c44e011c7bb8051d3d83d0f54f4e3ae839039c9b0ad49fdc522519e5a5651d1c3db50d4726c3ece42c366c79cb68fbf67351d5aedf90febf591b5908a826355c816cc226fff0403655caa2c34691602def8e4ff6cd52594881f15873f98bfcb6cdd99dede674c6d4cea5ae1e582276f0811283e3cdb310d20b4cda62387758669780f8307f4db3fe659f62536ab434275aed5384d97ec32e5fa60ffab67281234d1e7afb20d134c5cf13b470935ed1d58afa142fedc317cbf891ebabcb81850d4127cbf84e1e36fe098193e463d9f08d8578d5a95b6808dcb9f52da00eb0db6fcb47096f736b77be3e21c22325c29c4c5ee9fcc62b8a310e0630649096b2ddcdddf274b4e9b7f67de80664fc14087a1efcb6d9b020deadf321b723c6fcc5b896b806442fe89569300a880f10da45c4d9f0364aa820a08b854274f9cd00f43cfb8efb3a14cc2103f70014475a36c969cd8ee0880087713fa841249a0a0c1aff81cda4329948d5e3b4311b3e734b71224076ba30733c8faed4cc371c2061b0e13bb4c57f6def73bd540ed421514ad8604c51a58781c6f9be4de1bbe0c91e8eb31c0f35da2784988b26014355a2cfa73ca6667dee57088ef383aa5e3b1e6ef3792b55e0c2e8bda38c78f8114a23cc0195cb8950070df3f9c323071b1b40a292c899fe7bb48a3f44b0e2907653c07a15ebcee81d59cef7a303510447eaf899af1c09569d3a5c86bc248da19c192ec985957b399de4bce632094fe47677e63e89594afb749068fb594c18bef5aefad834e2da8a23a4cd62e75f5496b90d85fce6ec349e610b2abf90c8da21fa4d21d5cae0604bad7d788b4b0f6d8ac60152c4154f2d1b90fd04b98c8e7c2c111aea58470339846a403d6de7b136d94b01e3d8698e60f5830256362974da0a38b1e8885da7558c89735ffded32177067dcc9787f35e2b914cb867107301317847f275b7ebca2aa5e2ba77adde10c1859b64e2ecb5e0a7f036ad5ccce62c229587d9341e4e4fb3dd9c3909cce7597c5d274839b25672c4b8181875aa6f829c3696f86f5d7b9238652008d0903720f89a0700a33fb3938ed6219799f2c69d265b9b77d566b84a6046bcd281f9d881d1f8d48e4b04e93d7a3059632da1c3112d0775adbc02e16dec2d11debd10335060eec95bcabb4a4ae2293921739daa69e7659dd334798324a1d9b2836b5f09fcf0a868be4d3b398bd52c061663081c9f874efc2155a3f334ce3f5401de26680b0344fd816af11ddbb40c99a28d2d718bbbee95bdc299d437e97402c22f7c2afb64e0406b1dcc5583550c79d408001e5322bb7c11293e14dc4c3411452f8b1b07137b28e8b425b008a47dcf8747d5e91122856cc01c0500bd4c4af76a7647aa22ff94578de43221f98c0bd46b3045923836be623bf5cfb72b9d1d203488119f4d9e4a4338d15a8f3c958617a842594297352de4240b270a29fb6dcba210893af1331a1d72670d096d986c6538bcbab16802e69b115e6451a1d27aa12892c9e40382decb7fd6d89c7155a775c5d3081e6c67c62ac10d296838ccc7b6289bb3c2baae5605276e263a189e858f7aef3d97e406b24b5546a692fd25b377c489939d0ad6eecd6009eb3892ec0735d3b772f7f3fa5e34ab14b92ec68dfe497fc10322baf75cc6e57c215d1e1e0a36becb3c09cd0b19c25dc7cbc25a4e2ce3f298c8f6e70f92c0a8628e30f6954c046cddf872edc83519ce7d3469585f4871a665b2e946a5d293aa56b4eb10158c606add0d955ad68aa2e013bea78ac21341c44a0377093eb47b09c3e91de2bcd9d59744fb12c0b5d63cb8e0bd14b9d278409f46107a042cd092d700c107a21a321b186f06a56d86bae34180a54cbd3b24a57f0594143db52a3ed4c3a4e71659ea8326d3024c703a19d72add427ac4e685a046561a2906f66ed6cdf0c0bcf70efe5f502b6240f91639ddda9e1670aa5f4b681164c7bf69dceb40965a3fe40d2d7f1695764ca4ca125c9c7972eb5924c00de5f2f3fac368d2b3a9ff566f0400ffc71fcd0d7b6d0a2085200b6f0f560ef7c08d920dd528fa7573c80f88f147a7865443570ab5688e25fbb4164c55b2ff35e95dd29345f37622c5c684bf8b002d64e8eb0ec3d74ea5253b9056342aecd484185e9fe6f7f8fa4b16e5c0ac69420c873bf749c45856a9c4bad5a437d8c55a16de2f05226ff2364bdecef0eea0c5b927a20f88753f21ac898990bedc118e43ed11ac81600939a4f1ee48d783b2aec8b91f9fd5b497dc4aec276624947ac074338a2f0b38624feaca7d42a8855c7f005b0e3df2af98b16e34da92e1e4faeab854ca907fd96653741323ac34d797841906c48414dc262fb25077fc9efabbd1b677dea7b95f5a4037a8eddc63421f6cbedc35c3c8fb02573b2efd74b728ce97c0c8a5ffab80d0360b6025ac8e31a917f494874b7cdfa5b93fbcc0c91eb61bfe6d5afe18dceaa7c03f7ce36bce0184e8aef67bcd15558b39edd46760eb4dee519e1bae58bc01e6923601fc210c8791490adebac719cbe0c504140d64bd8c7eb390297b3e8012cb4f563c8553382268df5aa61b3b0cfd954dca7b659d3c2547f914f1a948654b6e75d78f2d33f763c73193d05d7c799ef564002fa4ce5c863b3d70ebfad3d9e93ba10b0f67212a0db26d7d5e192164065b3305b1073633659a1651889bad840319acde3ec7b1a3a2ec9cf4ea6fe2ff768ec3ea3ef6753cea2444cf3dbc4389b8e063e4dc8f4cb033d1d23ba10af57abbabda8a417018a9b5cce453447c7c19d324194daa05cb7577e5c5a6cf28061b1dc1d94c454df03aa4a243774ffc98b0348f0f961afd57235e9a291bec71838f299f61d29c095cdeb96ab9b8acdc7eb10018e41c918e66c74a41ef41652b7b66277ef0b2bb21f7800bdda040db5c5cd4eef4db4a77ec1cfdbed41649e47cc239357b497551f0abaf8de5680543f3fdce42f11b708031fa5cc735755e0ddca81c4c8a03ab131f737812409bb5bc2eed537187ffaf2715657ab5d837c4ace34498324fd565c5d51b6", 0x1000, 0x6, 0x0, 0x1, r2}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x8001, r1, &(0x7f0000001580)="53b500c32a3e13b045605c5c0163ded0b8694f794289e062", 0x18, 0x4, 0x0, 0x1}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000001600)="4d66441600e178c41df204090ea942ae2e979c71ab06", 0x16, 0x9}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x3, 0xf3a4, r0, &(0x7f0000001680)="923d234c816c93c7aa834880b40fac319ad4171380d59acd0f5bab668bdbead2476845e71011943598cdeefd7f11d483b18d3810c5698a9f2deb00597342c0b196b5b7a708348b944468c03ac9bc2f1e97968613feb73675371a601fb190d3dd1c22db28f868a0be911c30cf471bc2d7cdd4034d74bfd6f71290c45539bc6ea64f6b500e7830080386cc0536a96c454242d0", 0x92, 0xfffffffffffffffa, 0x0, 0x2, r2}]) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00db0000000000d6fe4ce0fa9cfaed8a264cb7ca00c1"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3106.682434] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3106.725280] lowmem_reserve[]: 0 0 0 0 0
[ 3106.757721] Node 0 DMA32 free:38044kB min:35996kB low:44992kB high:53988kB active_anon:822572kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:2804kB local_pcp:1336kB free_cma:0kB
[ 3106.811426] Node 1 Normal free:1798272kB min:53876kB low:67344kB high:80812kB active_anon:158412kB inactive_anon:100268kB active_file:16912kB inactive_file:340456kB unevictable:0kB writepending:976kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:45792kB pagetables:76148kB bounce:0kB free_pcp:2404kB local_pcp:1084kB free_cma:0kB
[ 3106.855134] lowmem_reserve[]: 0 0 1 1 1
[ 3106.859242] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3106.886430] lowmem_reserve[]: 0 0 0 0 0
[ 3106.890648] Node 1 Normal free:1798480kB min:53876kB low:67344kB high:80812kB active_anon:159112kB inactive_anon:100268kB active_file:16912kB inactive_file:340456kB unevictable:0kB writepending:976kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:45856kB pagetables:76148kB bounce:0kB free_pcp:1528kB local_pcp:1320kB free_cma:0kB
[ 3106.946075] lowmem_reserve[]: 0 0 0 0 0
[ 3106.950612] Node 0 DMA: 6*4kB (UME) 26*8kB (UH) 9*16kB (UMH) 1*32kB (H) 0*64kB 3*128kB (UM) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11032kB
[ 3106.967080] lowmem_reserve[]: 0 0 0 0 0
[ 3107.059298] Node 0 DMA: 6*4kB (UME) 26*8kB (UH) 9*16kB (UMH) 1*32kB (H) 0*64kB 3*128kB (UM) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11032kB
[ 3107.108270] Node 0 DMA32: 2075*4kB (UM) 1808*8kB (ME) 672*16kB (ME) 141*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38028kB
[ 3107.232252] Node 0 DMA32: 2075*4kB (UM) 1865*8kB (UME) 701*16kB (UME) 158*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39620kB
[ 3107.259755] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3107.363793] Node 1 Normal: 3921*4kB (UME) 2138*8kB (UME) 1795*16kB (UME) 2372*32kB (UME) 1046*64kB (UME) 1563*128kB (M) 1113*256kB (M) 749*512kB (UME) 375*1024kB (UME) 2*2048kB (ME) 83*4096kB (M) = 1800900kB
[ 3107.403425] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3107.419351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3107.434010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3107.461130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3107.488327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3107.491771] Node 1 Normal: 3909*4kB (UME) 2097*8kB (UME) 1782*16kB (UME) 2380*32kB (UME) 1049*64kB (UME) 1565*128kB (M) 1114*256kB (M) 749*512kB (UME) 375*1024kB (UME) 3*2048kB (ME) 83*4096kB (M) = 1803324kB
[ 3107.524369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3107.534281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3107.544469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3107.548363] 82388 total pagecache pages
[ 3107.554739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3107.570704] 82388 total pagecache pages
[ 3107.574765] 0 pages in swap cache
[ 3107.581586] Swap cache stats: add 0, delete 0, find 0/0
[ 3107.588233] Free swap  = 0kB
[ 3107.590576] 0 pages in swap cache
[ 3107.591316] Total swap = 0kB
[ 3107.594692] Swap cache stats: add 0, delete 0, find 0/0
[ 3107.594698] Free swap  = 0kB
[ 3107.594703] Total swap = 0kB
[ 3107.594716] 2097051 pages RAM
15:31:22 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:22 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:22 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:22 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:22 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbca"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:22 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x0, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3107.602716] 2097051 pages RAM
[ 3107.618169] 0 pages HighMem/MovableOnly
[ 3107.622151] 369649 pages reserved
[ 3107.626046] 0 pages cma reserved
[ 3107.627853] 0 pages HighMem/MovableOnly
[ 3107.633383] 369649 pages reserved
[ 3107.650867] 0 pages cma reserved
15:31:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbca"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:23 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

[ 3108.715172] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3108.727304] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3108.738391] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3108.743806] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3108.757044] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3108.762732] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3108.780964] CPU: 1 PID: 28071 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3108.788865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3108.798229] Call Trace:
[ 3108.800831]  dump_stack+0x1fc/0x2ef
[ 3108.804473]  warn_alloc.cold+0x7b/0x18f
[ 3108.808460]  ? zone_watermark_ok_safe+0x260/0x260
[ 3108.813313]  ? try_to_free_pages+0x2d7/0x7c0
[ 3108.817738]  ? wait_for_completion_io+0x10/0x10
[ 3108.822431]  __alloc_pages_nodemask+0x232f/0x2890
[ 3108.827295]  ? rcu_nmi_exit+0xb3/0x180
[ 3108.831200]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3108.836053]  ? rcu_nmi_exit+0xb3/0x180
[ 3108.839975]  alloc_new_node_page+0x2b6/0x400
[ 3108.844399]  migrate_pages+0x528/0x2fe0
[ 3108.848385]  ? mpol_set_nodemask+0x450/0x450
[ 3108.852818]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3108.858368]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3108.863749]  ? mpol_set_nodemask+0x450/0x450
[ 3108.868169]  kernel_move_pages+0xde2/0x1820
[ 3108.872509]  ? migrate_pages+0x2fe0/0x2fe0
[ 3108.876748]  ? __se_sys_futex+0x28f/0x3b0
[ 3108.880894]  ? __se_sys_futex+0x298/0x3b0
[ 3108.885052]  ? do_futex+0x1880/0x1880
[ 3108.888867]  __x64_sys_move_pages+0xdd/0x1b0
[ 3108.893282]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3108.897869]  do_syscall_64+0xf9/0x620
[ 3108.901682]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3108.906874] RIP: 0033:0x7f12f54cce99
[ 3108.910591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3108.929496] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3108.937209] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3108.944481] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3108.951755] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3108.959033] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3108.966400] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3109.011581] CPU: 1 PID: 28068 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3109.019486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3109.028841] Call Trace:
[ 3109.031440]  dump_stack+0x1fc/0x2ef
[ 3109.035087]  warn_alloc.cold+0x7b/0x18f
[ 3109.039074]  ? zone_watermark_ok_safe+0x260/0x260
[ 3109.044022]  ? try_to_free_pages+0x2d7/0x7c0
[ 3109.048453]  ? wait_for_completion_io+0x10/0x10
[ 3109.053152]  __alloc_pages_nodemask+0x232f/0x2890
[ 3109.058019]  ? debug_check_no_obj_freed+0x201/0x490
[ 3109.063057]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3109.067916]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3109.073051]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3109.077669]  alloc_new_node_page+0x2b6/0x400
[ 3109.082080]  migrate_pages+0x528/0x2fe0
[ 3109.086063]  ? mpol_set_nodemask+0x450/0x450
[ 3109.090483]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3109.096027]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3109.101401]  kernel_move_pages+0xde2/0x1820
[ 3109.105738]  ? migrate_pages+0x2fe0/0x2fe0
[ 3109.109982]  ? __se_sys_futex+0x28f/0x3b0
[ 3109.114141]  ? __se_sys_futex+0x298/0x3b0
[ 3109.118307]  ? do_futex+0x1880/0x1880
[ 3109.122125]  __x64_sys_move_pages+0xdd/0x1b0
[ 3109.126541]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3109.131130]  do_syscall_64+0xf9/0x620
[ 3109.134942]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3109.140136] RIP: 0033:0x7f1e38c8fe99
[ 3109.143854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3109.162759] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3109.170473] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3109.177745] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3109.185021] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3109.192301] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3109.199576] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3109.209005] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 3109.218567] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3109.244662] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3109.248085] CPU: 1 PID: 28070 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3109.258581] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3109.264375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3109.264382] Call Trace:
[ 3109.264402]  dump_stack+0x1fc/0x2ef
[ 3109.264423]  warn_alloc.cold+0x7b/0x18f
[ 3109.264442]  ? zone_watermark_ok_safe+0x260/0x260
[ 3109.264459]  ? try_to_free_pages+0x2d7/0x7c0
[ 3109.298258]  ? wait_for_completion_io+0x10/0x10
[ 3109.302947]  __alloc_pages_nodemask+0x232f/0x2890
[ 3109.307805]  ? debug_check_no_obj_freed+0x201/0x490
[ 3109.312839]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3109.317683]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3109.322796]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3109.327407]  alloc_new_node_page+0x2b6/0x400
[ 3109.331823]  migrate_pages+0x528/0x2fe0
[ 3109.335802]  ? mpol_set_nodemask+0x450/0x450
[ 3109.340218]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3109.345757]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3109.351140]  kernel_move_pages+0xde2/0x1820
[ 3109.355473]  ? migrate_pages+0x2fe0/0x2fe0
[ 3109.359711]  ? __se_sys_futex+0x28f/0x3b0
[ 3109.363857]  ? __se_sys_futex+0x298/0x3b0
[ 3109.368006]  ? lock_downgrade+0x720/0x720
[ 3109.372153]  ? do_futex+0x1880/0x1880
[ 3109.375966]  __x64_sys_move_pages+0xdd/0x1b0
[ 3109.380376]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3109.384961]  do_syscall_64+0xf9/0x620
[ 3109.388863]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3109.394053] RIP: 0033:0x7fe0a8319e99
[ 3109.397769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3109.416669] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3109.424375] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3109.431646] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3109.438926] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3109.446195] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3109.453459] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
[ 3109.460753] CPU: 0 PID: 28080 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3109.468651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3109.478011] Call Trace:
[ 3109.480610]  dump_stack+0x1fc/0x2ef
[ 3109.484260]  warn_alloc.cold+0x7b/0x18f
[ 3109.488249]  ? zone_watermark_ok_safe+0x260/0x260
[ 3109.493113]  ? wait_for_completion_io+0x10/0x10
[ 3109.497803]  __alloc_pages_nodemask+0x232f/0x2890
[ 3109.502686]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3109.506150] Mem-Info:
[ 3109.507560]  alloc_new_node_page+0x2b6/0x400
[ 3109.507577]  migrate_pages+0x528/0x2fe0
[ 3109.510079] active_anon:245987 inactive_anon:67444 isolated_anon:1472
[ 3109.510079]  active_file:4234 inactive_file:85128 isolated_file:0
[ 3109.510079]  unevictable:0 dirty:60 writeback:0 unstable:0
[ 3109.510079]  slab_reclaimable:136774 slab_unreclaimable:316804
[ 3109.510079]  mapped:75919 shmem:71879 pagetables:22206 bounce:0
[ 3109.510079]  free:462349 free_pcp:816 free_cma:0
[ 3109.514370]  ? mpol_set_nodemask+0x450/0x450
[ 3109.514396]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3109.514413]  ? lock_downgrade+0x720/0x720
[ 3109.518498] Node 0 active_anon:825696kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3109.552835]  ? lock_acquire+0x170/0x3c0
[ 3109.552853]  ? __might_fault+0xef/0x1d0
[ 3109.552879]  kernel_move_pages+0xde2/0x1820
[ 3109.552902]  ? migrate_pages+0x2fe0/0x2fe0
[ 3109.552916]  ? __se_sys_futex+0x28f/0x3b0
[ 3109.552927]  ? __se_sys_futex+0x298/0x3b0
[ 3109.552944]  ? do_futex+0x1880/0x1880
[ 3109.557540] Node 1 active_anon:158252kB inactive_anon:100268kB active_file:16932kB inactive_file:340508kB unevictable:0kB isolated(anon):5888kB isolated(file):0kB mapped:91984kB dirty:240kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3109.562868]  __x64_sys_move_pages+0xdd/0x1b0
[ 3109.562887]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3109.562904]  do_syscall_64+0xf9/0x620
[ 3109.567132] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:144kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3109.594875]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3109.594890] RIP: 0033:0x7f992dec9e99
[ 3109.594905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3109.594912] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3109.594925] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3109.594932] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3109.594939] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3109.594946] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3109.594955] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3109.606602] CPU: 0 PID: 28066 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3109.663450] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3109.664855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3109.664861] Call Trace:
[ 3109.664882]  dump_stack+0x1fc/0x2ef
[ 3109.664906]  warn_alloc.cold+0x7b/0x18f
15:31:24 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:24 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3109.753419] Node 0 DMA32 free:35944kB min:35996kB low:44992kB high:53988kB active_anon:824452kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1612kB local_pcp:1380kB free_cma:0kB
[ 3109.756416]  ? zone_watermark_ok_safe+0x260/0x260
[ 3109.756431]  ? try_to_free_pages+0x2d7/0x7c0
[ 3109.756456]  ? wait_for_completion_io+0x10/0x10
[ 3109.756478]  __alloc_pages_nodemask+0x232f/0x2890
[ 3109.765227] lowmem_reserve[]: 0 0 1 1 1
[ 3109.771611]  ? debug_check_no_obj_freed+0x201/0x490
[ 3109.771638]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3109.771655]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3109.776809] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3109.785996]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3109.786038]  alloc_new_node_page+0x2b6/0x400
[ 3109.786054]  migrate_pages+0x528/0x2fe0
[ 3109.786072]  ? mpol_set_nodemask+0x450/0x450
[ 3109.788726] lowmem_reserve[]: 0 0 0 0 0
[ 3109.792252]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3109.792269]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3109.792293]  kernel_move_pages+0xde2/0x1820
[ 3109.792315]  ? migrate_pages+0x2fe0/0x2fe0
[ 3109.792329]  ? __se_sys_futex+0x28f/0x3b0
[ 3109.792343]  ? __se_sys_futex+0x298/0x3b0
[ 3109.792358]  ? do_futex+0x1880/0x1880
[ 3109.792380]  __x64_sys_move_pages+0xdd/0x1b0
[ 3109.792398]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3109.792410]  do_syscall_64+0xf9/0x620
[ 3109.792429]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3109.792441] RIP: 0033:0x7f6a683bfe99
15:31:25 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
move_pages(0x0, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbca"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3109.792454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3109.792466] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3109.796698] Node 1 Normal free:1803252kB min:53876kB low:67344kB high:80812kB active_anon:158252kB inactive_anon:100268kB active_file:16932kB inactive_file:340508kB unevictable:0kB writepending:240kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:45728kB pagetables:76132kB bounce:0kB free_pcp:2668kB local_pcp:1408kB free_cma:0kB
[ 3109.825640] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3109.825650] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3109.825657] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3109.825664] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3109.825673] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3110.396409] lowmem_reserve[]: 0 0 0 0 0
[ 3110.414296] Node 0 DMA: 5*4kB (ME) 25*8kB (UMH) 8*16kB (UMH) 1*32kB (H) 0*64kB 3*128kB (UM) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11004kB
[ 3110.552461] Node 0 DMA32: 2124*4kB (UM) 1816*8kB (UME) 641*16kB (UME) 126*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37312kB
[ 3110.641290] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3110.705897] Node 1 Normal: 3943*4kB (UME) 2369*8kB (UME) 1840*16kB (UME) 2392*32kB (UME) 1062*64kB (UME) 1573*128kB (M) 1122*256kB (M) 749*512kB (UME) 382*1024kB (UME) 3*2048kB (ME) 80*4096kB (M) = 1805732kB
[ 3110.810856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3110.861572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3110.914759] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3110.915293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3110.933804] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3110.937543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3110.942852] CPU: 0 PID: 28119 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3110.951317] 82412 total pagecache pages
[ 3110.957870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3110.957875] Call Trace:
[ 3110.957896]  dump_stack+0x1fc/0x2ef
[ 3110.957914]  warn_alloc.cold+0x7b/0x18f
[ 3110.957935]  ? zone_watermark_ok_safe+0x260/0x260
[ 3110.964687] 0 pages in swap cache
[ 3110.971244]  ? try_to_free_pages+0x2d7/0x7c0
[ 3110.971270]  ? wait_for_completion_io+0x10/0x10
[ 3110.971295]  __alloc_pages_nodemask+0x232f/0x2890
[ 3110.971318]  ? debug_check_no_obj_freed+0x201/0x490
[ 3110.976178] Swap cache stats: add 0, delete 0, find 0/0
15:31:26 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:26 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:26 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f00000001c0)="971d60fb35cddf214b8e29ce6f7f296b89b2339d761b68d54dd0d0492434eeede7352e23b4e118f6849e984d41f54d713e93af0bc713fd4e68218281be768c0018a2c6bf1b6cc4d3ad9bb0948560fc2865f84a01cdd313d3b08152aaee5b7a452abb96b5a89fdef11b9b6fb95daa09c77b5bbcd977e1f8ba757ce91fb240ca0ee1e05f924b6c698978f4f908a4550933c12c479c721a1b21dfbe21558fbbca35718574901cad061864d0d301aed3b1075fc1013760a3187ece15613ec19b121b0749", 0xc2}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:26 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x0, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3110.977509]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3110.981573] Free swap  = 0kB
[ 3110.981582] Total swap = 0kB
[ 3110.986410]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3110.986428]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3110.986464]  alloc_new_node_page+0x2b6/0x400
[ 3110.986481]  migrate_pages+0x528/0x2fe0
[ 3110.994813] 2097051 pages RAM
[ 3110.998963]  ? mpol_set_nodemask+0x450/0x450
[ 3110.998988]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3110.999003]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3110.999026]  kernel_move_pages+0xde2/0x1820
[ 3111.003860] 0 pages HighMem/MovableOnly
[ 3111.008884]  ? migrate_pages+0x2fe0/0x2fe0
[ 3111.008910]  ? retint_kernel+0x2d/0x2d
[ 3111.017756] 369649 pages reserved
[ 3111.019081]  __x64_sys_move_pages+0xdd/0x1b0
[ 3111.022377] 0 pages cma reserved
[ 3111.025074]  ? do_syscall_64+0x56/0x620
[ 3111.025089]  do_syscall_64+0xf9/0x620
[ 3111.025109]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3111.025123] RIP: 0033:0x7f992dec9e99
[ 3111.105740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3111.124644] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3111.132448] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3111.139724] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3111.147087] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3111.154355] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
15:31:26 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
move_pages(0x0, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3111.161625] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3111.505011] warn_alloc_show_mem: 4 callbacks suppressed
[ 3111.505018] Mem-Info:
[ 3111.512905] active_anon:245696 inactive_anon:67444 isolated_anon:1352
[ 3111.512905]  active_file:4236 inactive_file:85144 isolated_file:0
[ 3111.512905]  unevictable:0 dirty:84 writeback:0 unstable:0
[ 3111.512905]  slab_reclaimable:136774 slab_unreclaimable:316398
[ 3111.512905]  mapped:75927 shmem:71879 pagetables:22261 bounce:0
[ 3111.512905]  free:463067 free_pcp:691 free_cma:0
15:31:26 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3111.709190] Node 0 active_anon:824752kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3111.977333] Node 1 active_anon:159956kB inactive_anon:100264kB active_file:16940kB inactive_file:340592kB unevictable:0kB isolated(anon):4264kB isolated(file):0kB mapped:92592kB dirty:396kB writeback:0kB shmem:101516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
15:31:27 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
io_setup(0xa, &(0x7f0000000080)) (async, rerun: 32)
io_submit(0x0, 0x0, 0x0) (async, rerun: 32)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f00000001c0)="971d60fb35cddf214b8e29ce6f7f296b89b2339d761b68d54dd0d0492434eeede7352e23b4e118f6849e984d41f54d713e93af0bc713fd4e68218281be768c0018a2c6bf1b6cc4d3ad9bb0948560fc2865f84a01cdd313d3b08152aaee5b7a452abb96b5a89fdef11b9b6fb95daa09c77b5bbcd977e1f8ba757ce91fb240ca0ee1e05f924b6c698978f4f908a4550933c12c479c721a1b21dfbe21558fbbca35718574901cad061864d0d301aed3b1075fc1013760a3187ece15613ec19b121b0749", 0xc2}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async, rerun: 32)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3112.179522] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3112.191458] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3112.197113] CPU: 1 PID: 28144 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3112.205006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3112.208852] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3112.214350] Call Trace:
[ 3112.214371]  dump_stack+0x1fc/0x2ef
[ 3112.214392]  warn_alloc.cold+0x7b/0x18f
[ 3112.214411]  ? zone_watermark_ok_safe+0x260/0x260
[ 3112.214428]  ? try_to_free_pages+0x2d7/0x7c0
[ 3112.245577]  ? wait_for_completion_io+0x10/0x10
[ 3112.250266]  __alloc_pages_nodemask+0x232f/0x2890
[ 3112.255123]  ? debug_check_no_obj_freed+0x201/0x490
[ 3112.260159]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3112.265010]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3112.270126]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3112.274738]  alloc_new_node_page+0x2b6/0x400
15:31:27 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3112.279173]  migrate_pages+0x528/0x2fe0
[ 3112.283163]  ? mpol_set_nodemask+0x450/0x450
[ 3112.287588]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3112.293131]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3112.298513]  kernel_move_pages+0xde2/0x1820
[ 3112.302851]  ? migrate_pages+0x2fe0/0x2fe0
[ 3112.307090]  ? __se_sys_futex+0x28f/0x3b0
[ 3112.311240]  ? __se_sys_futex+0x298/0x3b0
[ 3112.315397]  ? do_futex+0x1880/0x1880
[ 3112.319206]  __x64_sys_move_pages+0xdd/0x1b0
[ 3112.323624]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3112.328212]  do_syscall_64+0xf9/0x620
[ 3112.332024]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3112.337220] RIP: 0033:0x7f12f54cce99
[ 3112.340938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
15:31:27 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3112.347038] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:116kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3112.359836] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3112.359850] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3112.359859] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3112.359867] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3112.359875] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3112.359884] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3112.376320] syz-executor.2 cpuset=/ mems_allowed=0-1
15:31:27 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f00000001c0)="971d60fb35cddf214b8e29ce6f7f296b89b2339d761b68d54dd0d0492434eeede7352e23b4e118f6849e984d41f54d713e93af0bc713fd4e68218281be768c0018a2c6bf1b6cc4d3ad9bb0948560fc2865f84a01cdd313d3b08152aaee5b7a452abb96b5a89fdef11b9b6fb95daa09c77b5bbcd977e1f8ba757ce91fb240ca0ee1e05f924b6c698978f4f908a4550933c12c479c721a1b21dfbe21558fbbca35718574901cad061864d0d301aed3b1075fc1013760a3187ece15613ec19b121b0749", 0xc2}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:27 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3112.750838] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3112.792505] Node 0 DMA32 free:36112kB min:35996kB low:44992kB high:53988kB active_anon:823868kB inactive_anon:169488kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:2928kB local_pcp:1408kB free_cma:0kB
[ 3112.936209] CPU: 1 PID: 28141 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3112.944128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3112.953486] Call Trace:
[ 3112.956087]  dump_stack+0x1fc/0x2ef
[ 3112.959726]  warn_alloc.cold+0x7b/0x18f
[ 3112.963715]  ? zone_watermark_ok_safe+0x260/0x260
[ 3112.968570]  ? try_to_free_pages+0x2d7/0x7c0
[ 3112.972991]  ? wait_for_completion_io+0x10/0x10
[ 3112.977673]  __alloc_pages_nodemask+0x232f/0x2890
[ 3112.982532]  ? debug_check_no_obj_freed+0x201/0x490
[ 3112.987565]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3112.992412]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3112.997543]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3113.002156]  alloc_new_node_page+0x2b6/0x400
[ 3113.006571]  migrate_pages+0x528/0x2fe0
[ 3113.010555]  ? mpol_set_nodemask+0x450/0x450
[ 3113.014980]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3113.020522]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3113.025903]  kernel_move_pages+0xde2/0x1820
[ 3113.030245]  ? migrate_pages+0x2fe0/0x2fe0
[ 3113.034482]  ? __se_sys_futex+0x28f/0x3b0
[ 3113.038633]  ? __se_sys_futex+0x298/0x3b0
[ 3113.042789]  ? do_futex+0x1880/0x1880
[ 3113.046600]  __x64_sys_move_pages+0xdd/0x1b0
[ 3113.051013]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3113.055598]  do_syscall_64+0xf9/0x620
[ 3113.059415]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3113.064617] RIP: 0033:0x7f6a683bfe99
[ 3113.068335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3113.087247] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3113.094961] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3113.102241] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3113.109513] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3113.116786] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3113.124056] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3113.185873] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3113.198475] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 3113.203771] CPU: 0 PID: 28176 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3113.211657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3113.221043] Call Trace:
[ 3113.223986]  dump_stack+0x1fc/0x2ef
[ 3113.227619]  warn_alloc.cold+0x7b/0x18f
[ 3113.231597]  ? zone_watermark_ok_safe+0x260/0x260
[ 3113.236448]  ? try_to_free_pages+0x2d7/0x7c0
[ 3113.240874]  ? wait_for_completion_io+0x10/0x10
[ 3113.245561]  __alloc_pages_nodemask+0x232f/0x2890
[ 3113.250415]  ? debug_check_no_obj_freed+0x201/0x490
[ 3113.255447]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3113.260294]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3113.265404]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3113.270012]  alloc_new_node_page+0x2b6/0x400
[ 3113.274431]  migrate_pages+0x528/0x2fe0
[ 3113.278417]  ? mpol_set_nodemask+0x450/0x450
[ 3113.282842]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3113.288383]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3113.293769]  kernel_move_pages+0xde2/0x1820
[ 3113.298103]  ? migrate_pages+0x2fe0/0x2fe0
[ 3113.302341]  ? __se_sys_futex+0x28f/0x3b0
[ 3113.306488]  ? __se_sys_futex+0x298/0x3b0
[ 3113.310639]  ? do_futex+0x1880/0x1880
[ 3113.314484]  __x64_sys_move_pages+0xdd/0x1b0
[ 3113.318905]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3113.323524]  do_syscall_64+0xf9/0x620
[ 3113.327330]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3113.332517] RIP: 0033:0x7fe0a8319e99
[ 3113.336233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3113.355138] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3113.361029] lowmem_reserve[]: 0 0 1 1 1
[ 3113.362848] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3113.362857] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3113.362866] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3113.362874] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3113.362886] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
[ 3113.400288] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3113.421074] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3113.438005] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3113.452538] CPU: 1 PID: 28179 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3113.460435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3113.469793] Call Trace:
[ 3113.472411]  dump_stack+0x1fc/0x2ef
[ 3113.476052]  warn_alloc.cold+0x7b/0x18f
[ 3113.480044]  ? zone_watermark_ok_safe+0x260/0x260
[ 3113.484888]  ? try_to_free_pages+0x2d7/0x7c0
[ 3113.489319]  ? wait_for_completion_io+0x10/0x10
[ 3113.494003]  __alloc_pages_nodemask+0x232f/0x2890
[ 3113.498866]  ? rcu_nmi_exit+0xb3/0x180
[ 3113.502776]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3113.507641]  ? _raw_spin_unlock_irqrestore+0xa3/0xe0
[ 3113.512779]  alloc_new_node_page+0x2b6/0x400
[ 3113.517195]  migrate_pages+0x528/0x2fe0
[ 3113.521188]  ? mpol_set_nodemask+0x450/0x450
[ 3113.525619]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3113.531172]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3113.536560]  kernel_move_pages+0xde2/0x1820
[ 3113.540904]  ? migrate_pages+0x2fe0/0x2fe0
[ 3113.545146]  ? retint_kernel+0x2d/0x2d
[ 3113.549048]  ? __x64_sys_move_pages+0xd/0x1b0
[ 3113.553559]  __x64_sys_move_pages+0xdd/0x1b0
[ 3113.557982]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3113.562567]  do_syscall_64+0xf9/0x620
[ 3113.566382]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3113.571576] RIP: 0033:0x7f1e38c8fe99
[ 3113.575292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3113.594199] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3113.601920] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3113.609198] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3113.616336] lowmem_reserve[]: 0 0 0 0 0
[ 3113.616487] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3113.616499] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3113.622743] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3113.627801] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3113.650644] Node 1 Normal free:1801256kB min:53876kB low:67344kB high:80812kB active_anon:158596kB inactive_anon:100268kB active_file:16948kB inactive_file:340608kB unevictable:0kB writepending:420kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:45824kB pagetables:76312kB bounce:0kB free_pcp:2700kB local_pcp:1312kB free_cma:0kB
[ 3113.658279] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3113.705804] CPU: 0 PID: 28185 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3113.713701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3113.718247] warn_alloc_show_mem: 1 callbacks suppressed
[ 3113.718251] Mem-Info:
[ 3113.723048] Call Trace:
[ 3113.723070]  dump_stack+0x1fc/0x2ef
[ 3113.723089]  warn_alloc.cold+0x7b/0x18f
[ 3113.723107]  ? zone_watermark_ok_safe+0x260/0x260
[ 3113.732709] lowmem_reserve[]: 0 0 0 0 0
[ 3113.733614]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3113.738712] active_anon:246002 inactive_anon:67444 isolated_anon:1562
[ 3113.738712]  active_file:4238 inactive_file:85153 isolated_file:0
[ 3113.738712]  unevictable:0 dirty:105 writeback:0 unstable:0
[ 3113.738712]  slab_reclaimable:136774 slab_unreclaimable:316882
[ 3113.738712]  mapped:75960 shmem:71879 pagetables:22251 bounce:0
[ 3113.738712]  free:461868 free_pcp:1089 free_cma:0
[ 3113.741200]  ? wait_for_completion_io+0x10/0x10
[ 3113.741218]  ? __zone_watermark_ok+0x206/0x300
[ 3113.741238]  __alloc_pages_nodemask+0x232f/0x2890
[ 3113.748372] Node 0 DMA: 5*4kB (ME) 24*8kB (UH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10964kB
[ 3113.750044]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3113.750056]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3113.750071]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3113.757016] Node 0 DMA32: 1946*4kB (UM) 1717*8kB (UME) 648*16kB (UME) 126*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35920kB
[ 3113.789455]  ? rcu_nmi_exit+0xb3/0x180
[ 3113.789489]  alloc_new_node_page+0x2b6/0x400
[ 3113.789505]  migrate_pages+0x528/0x2fe0
[ 3113.789523]  ? mpol_set_nodemask+0x450/0x450
[ 3113.789545]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3113.789561]  ? lock_downgrade+0x720/0x720
[ 3113.789573]  ? lock_acquire+0x170/0x3c0
[ 3113.789588]  ? __might_fault+0xef/0x1d0
[ 3113.789612]  kernel_move_pages+0xde2/0x1820
[ 3113.789635]  ? migrate_pages+0x2fe0/0x2fe0
[ 3113.789650]  ? __se_sys_futex+0x28f/0x3b0
[ 3113.789663]  ? __se_sys_futex+0x298/0x3b0
[ 3113.789679]  ? do_futex+0x1880/0x1880
[ 3113.789699]  __x64_sys_move_pages+0xdd/0x1b0
[ 3113.789739]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3113.802267] Node 0 active_anon:825412kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3113.803801]  do_syscall_64+0xf9/0x620
[ 3113.803823]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3113.803834] RIP: 0033:0x7f12f54cce99
[ 3113.803849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3113.824353] Node 1 active_anon:158596kB inactive_anon:100268kB active_file:16948kB inactive_file:340608kB unevictable:0kB isolated(anon):6248kB isolated(file):0kB mapped:92148kB dirty:420kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3113.828840] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3113.828853] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3113.828862] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3113.828869] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3113.828877] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3113.828884] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3113.865873] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3113.989653] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:120kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3114.004254] Node 1 Normal: 3929*4kB (UME) 2194*8kB (UME) 1660*16kB (UME) 2409*32kB (UME) 1068*64kB (UME) 1579*128kB (M) 1132*256kB (M) 755*512kB (UME) 385*1024kB (UME) 1*2048kB (E) 79*4096kB (M) = 1803604kB
[ 3114.018097] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3114.018641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3114.034442] Node 0 DMA32 free:38040kB min:35996kB low:44992kB high:53988kB active_anon:824408kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:2672kB local_pcp:1192kB free_cma:0kB
[ 3114.040265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3114.056027] lowmem_reserve[]: 0 0 1 1 1
[ 3114.058661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3114.091751] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3114.104861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3114.116048] lowmem_reserve[]: 0 0 0 0 0
[ 3114.119065] 82433 total pagecache pages
[ 3114.153742] Node 1 Normal free:1803428kB min:53876kB low:67344kB high:80812kB active_anon:158228kB inactive_anon:100268kB active_file:16948kB inactive_file:340624kB unevictable:0kB writepending:468kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:45696kB pagetables:76116kB bounce:0kB free_pcp:2632kB local_pcp:1292kB free_cma:0kB
[ 3114.157321] 0 pages in swap cache
[ 3114.160517] lowmem_reserve[]: 0 0 0 0 0
[ 3114.175311] Swap cache stats: add 0, delete 0, find 0/0
[ 3114.195628] Node 0 DMA: 6*4kB (ME) 24*8kB (UH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB
[ 3114.211921] Free swap  = 0kB
[ 3114.242564] Node 0 DMA32: 1946*4kB (UM) 2053*8kB (UME) 659*16kB (UME) 126*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38784kB
[ 3114.254310] Total swap = 0kB
[ 3114.255515] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3114.277785] 2097051 pages RAM
[ 3114.287805] Node 1 Normal: 3929*4kB (UME) 2166*8kB (UME) 1660*16kB (UME) 2409*32kB (UME) 1068*64kB (UME) 1579*128kB (M) 1132*256kB (M) 755*512kB (UME) 385*1024kB (UME) 1*2048kB (E) 79*4096kB (M) = 1803380kB
[ 3114.294064] 0 pages HighMem/MovableOnly
[ 3114.302185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3114.302197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3114.302208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3114.302218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3114.302224] 82433 total pagecache pages
[ 3114.302237] 0 pages in swap cache
[ 3114.302246] Swap cache stats: add 0, delete 0, find 0/0
[ 3114.302251] Free swap  = 0kB
[ 3114.302257] Total swap = 0kB
[ 3114.302266] 2097051 pages RAM
[ 3114.302271] 0 pages HighMem/MovableOnly
[ 3114.302276] 369649 pages reserved
[ 3114.302281] 0 pages cma reserved
[ 3114.397174] 369649 pages reserved
15:31:29 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:29 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
clone(0x9000000, &(0x7f0000000600)="a9447bed4ba35db14091cd97fc8337f1353ddd3d1bac914997c2ffafa8f67acbbeba09ab7323aa1dd4ed156d0a0e5ab8c15e864fd11c5957fed0d94a5b03c36561dd34cbb72007b6cb3518641bc173121a1dcc65282cce88bc8c9c6395ec26fc7fe6946275d22e999ff1e61571fecc04a4beece55fec11414e309fa1a20fdb3629aa21fc2473aa91e72fcbd87a97c2761656c880e861f936f79dca78d2f5e7a93919a69dd5c96e2f6874b1d6e1667fca3435467f592f3f7c9b1f50465c564eae2142f703ee1d5fd160ebfccbf6ba24bd2d2aca7248e820ecf2e14c9db2a4196f8ea76f2221d266", &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)="b14ebec6bea994df1a222261692a7954848a5e686d2126ab843990989f7a75ed63b6e58ee2f22a30ffffda4f814673a5")
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000002", @ANYRES16=0x0, @ANYBLOB="01050000000000000000050000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="7429dbcd583ec8d4348cd98bddcd535a5a8cd82e8d31390d08a51d3ee3a9cea28cbba8cc0d96bb94e0becc5de4ead81dab3e844f99cf129c51d5465dc23990f0d696e272f40bea65db3a791f18c39d806fe8aea83d9c82fe2ee5a9c71e1e349a77dc799d4078d0e0f53aa64bdcb83a1fb71f513cb26aba6602da0242c4e4407a8f48e652359181a7da27f0b435d01e014fe4db6661ae26df02228759e14917c8222d6a1de9ed7015132ddff8f8d4c52fb0cd1a474521727deec3a1b6af12552912fd42c86887d1c6b20c537953f40d541616adc25910c99db0f6"], 0x28}}, 0x0)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x600c008}, 0x8800)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="6ee364002c00"])
syz_open_dev$sndpcmp(0x0, 0xfffffffffffffffd, 0x40000)
exit(0x4)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0)

15:31:29 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:29 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:29 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
move_pages(0x0, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:29 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3114.401028] 0 pages cma reserved
15:31:30 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:30 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x0, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:30 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:30 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
clone(0x9000000, &(0x7f0000000600)="a9447bed4ba35db14091cd97fc8337f1353ddd3d1bac914997c2ffafa8f67acbbeba09ab7323aa1dd4ed156d0a0e5ab8c15e864fd11c5957fed0d94a5b03c36561dd34cbb72007b6cb3518641bc173121a1dcc65282cce88bc8c9c6395ec26fc7fe6946275d22e999ff1e61571fecc04a4beece55fec11414e309fa1a20fdb3629aa21fc2473aa91e72fcbd87a97c2761656c880e861f936f79dca78d2f5e7a93919a69dd5c96e2f6874b1d6e1667fca3435467f592f3f7c9b1f50465c564eae2142f703ee1d5fd160ebfccbf6ba24bd2d2aca7248e820ecf2e14c9db2a4196f8ea76f2221d266", &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)="b14ebec6bea994df1a222261692a7954848a5e686d2126ab843990989f7a75ed63b6e58ee2f22a30ffffda4f814673a5")
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000002", @ANYRES16=0x0, @ANYBLOB="01050000000000000000050000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="7429dbcd583ec8d4348cd98bddcd535a5a8cd82e8d31390d08a51d3ee3a9cea28cbba8cc0d96bb94e0becc5de4ead81dab3e844f99cf129c51d5465dc23990f0d696e272f40bea65db3a791f18c39d806fe8aea83d9c82fe2ee5a9c71e1e349a77dc799d4078d0e0f53aa64bdcb83a1fb71f513cb26aba6602da0242c4e4407a8f48e652359181a7da27f0b435d01e014fe4db6661ae26df02228759e14917c8222d6a1de9ed7015132ddff8f8d4c52fb0cd1a474521727deec3a1b6af12552912fd42c86887d1c6b20c537953f40d541616adc25910c99db0f6"], 0x28}}, 0x0)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x600c008}, 0x8800)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="6ee364002c00"])
syz_open_dev$sndpcmp(0x0, 0xfffffffffffffffd, 0x40000)
exit(0x4)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
clone(0x9000000, &(0x7f0000000600)="a9447bed4ba35db14091cd97fc8337f1353ddd3d1bac914997c2ffafa8f67acbbeba09ab7323aa1dd4ed156d0a0e5ab8c15e864fd11c5957fed0d94a5b03c36561dd34cbb72007b6cb3518641bc173121a1dcc65282cce88bc8c9c6395ec26fc7fe6946275d22e999ff1e61571fecc04a4beece55fec11414e309fa1a20fdb3629aa21fc2473aa91e72fcbd87a97c2761656c880e861f936f79dca78d2f5e7a93919a69dd5c96e2f6874b1d6e1667fca3435467f592f3f7c9b1f50465c564eae2142f703ee1d5fd160ebfccbf6ba24bd2d2aca7248e820ecf2e14c9db2a4196f8ea76f2221d266", &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)="b14ebec6bea994df1a222261692a7954848a5e686d2126ab843990989f7a75ed63b6e58ee2f22a30ffffda4f814673a5") (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000002", @ANYRES16=0x0, @ANYBLOB="01050000000000000000050000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="7429dbcd583ec8d4348cd98bddcd535a5a8cd82e8d31390d08a51d3ee3a9cea28cbba8cc0d96bb94e0becc5de4ead81dab3e844f99cf129c51d5465dc23990f0d696e272f40bea65db3a791f18c39d806fe8aea83d9c82fe2ee5a9c71e1e349a77dc799d4078d0e0f53aa64bdcb83a1fb71f513cb26aba6602da0242c4e4407a8f48e652359181a7da27f0b435d01e014fe4db6661ae26df02228759e14917c8222d6a1de9ed7015132ddff8f8d4c52fb0cd1a474521727deec3a1b6af12552912fd42c86887d1c6b20c537953f40d541616adc25910c99db0f6"], 0x28}}, 0x0) (async)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x600c008}, 0x8800) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="6ee364002c00"]) (async)
syz_open_dev$sndpcmp(0x0, 0xfffffffffffffffd, 0x40000) (async)
exit(0x4) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) (async)

15:31:30 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:30 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:31 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
clone(0x9000000, &(0x7f0000000600)="a9447bed4ba35db14091cd97fc8337f1353ddd3d1bac914997c2ffafa8f67acbbeba09ab7323aa1dd4ed156d0a0e5ab8c15e864fd11c5957fed0d94a5b03c36561dd34cbb72007b6cb3518641bc173121a1dcc65282cce88bc8c9c6395ec26fc7fe6946275d22e999ff1e61571fecc04a4beece55fec11414e309fa1a20fdb3629aa21fc2473aa91e72fcbd87a97c2761656c880e861f936f79dca78d2f5e7a93919a69dd5c96e2f6874b1d6e1667fca3435467f592f3f7c9b1f50465c564eae2142f703ee1d5fd160ebfccbf6ba24bd2d2aca7248e820ecf2e14c9db2a4196f8ea76f2221d266", &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)="b14ebec6bea994df1a222261692a7954848a5e686d2126ab843990989f7a75ed63b6e58ee2f22a30ffffda4f814673a5") (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0) (async)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000002", @ANYRES16=0x0, @ANYBLOB="01050000000000000000050000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="7429dbcd583ec8d4348cd98bddcd535a5a8cd82e8d31390d08a51d3ee3a9cea28cbba8cc0d96bb94e0becc5de4ead81dab3e844f99cf129c51d5465dc23990f0d696e272f40bea65db3a791f18c39d806fe8aea83d9c82fe2ee5a9c71e1e349a77dc799d4078d0e0f53aa64bdcb83a1fb71f513cb26aba6602da0242c4e4407a8f48e652359181a7da27f0b435d01e014fe4db6661ae26df02228759e14917c8222d6a1de9ed7015132ddff8f8d4c52fb0cd1a474521727deec3a1b6af12552912fd42c86887d1c6b20c537953f40d541616adc25910c99db0f6"], 0x28}}, 0x0) (async)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x600c008}, 0x8800) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="6ee364002c00"]) (async)
syz_open_dev$sndpcmp(0x0, 0xfffffffffffffffd, 0x40000) (async)
exit(0x4)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0)

15:31:31 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x0, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:31 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbca"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:31 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x80000000}, @ldst={0x2, 0x3, 0x2, 0x6, 0x2, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x20, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x8, '\x00', r0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3000, 0xb, 0x40, 0xffffffff}, 0x10, 0x0, r1, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:31 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa0300907800"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:31 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:32 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbca"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:32 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x0, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:32 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x80000000}, @ldst={0x2, 0x3, 0x2, 0x6, 0x2, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x20, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x8, '\x00', r0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3000, 0xb, 0x40, 0xffffffff}, 0x10, 0x0, r1, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64)
bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0) (async, rerun: 32)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async, rerun: 32)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3117.790802] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3117.803594] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3117.827269] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3117.855773] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3117.861130] CPU: 0 PID: 28295 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3117.869020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3117.878381] Call Trace:
[ 3117.880986]  dump_stack+0x1fc/0x2ef
[ 3117.884634]  warn_alloc.cold+0x7b/0x18f
[ 3117.888623]  ? zone_watermark_ok_safe+0x260/0x260
[ 3117.893477]  ? try_to_free_pages+0x2d7/0x7c0
[ 3117.897905]  ? wait_for_completion_io+0x10/0x10
[ 3117.902599]  __alloc_pages_nodemask+0x232f/0x2890
[ 3117.907458]  ? __schedule+0x88f/0x2040
[ 3117.911364]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3117.916222]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3117.920815]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3117.925592]  ? retint_kernel+0x2d/0x2d
[ 3117.929508]  alloc_new_node_page+0x2b6/0x400
[ 3117.933936]  migrate_pages+0x528/0x2fe0
[ 3117.937932]  ? mpol_set_nodemask+0x450/0x450
[ 3117.942360]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3117.947905]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3117.953293]  kernel_move_pages+0xde2/0x1820
[ 3117.957634]  ? migrate_pages+0x2fe0/0x2fe0
[ 3117.961874]  ? __se_sys_futex+0x28f/0x3b0
[ 3117.966031]  ? __se_sys_futex+0x298/0x3b0
[ 3117.970188]  ? do_futex+0x1880/0x1880
[ 3117.974003]  __x64_sys_move_pages+0xdd/0x1b0
[ 3117.978420]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3117.980599] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 3117.983003]  do_syscall_64+0xf9/0x620
[ 3117.983026]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3117.983038] RIP: 0033:0x7f1e38c8fe99
[ 3117.983053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3118.016036] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3118.019716] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3118.019732] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3118.019741] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3118.019751] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3118.019759] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3118.019771] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3118.082986] CPU: 0 PID: 28296 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3118.090895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3118.100256] Call Trace:
[ 3118.102850]  dump_stack+0x1fc/0x2ef
[ 3118.106490]  warn_alloc.cold+0x7b/0x18f
[ 3118.110479]  ? zone_watermark_ok_safe+0x260/0x260
[ 3118.115330]  ? try_to_free_pages+0x2d7/0x7c0
[ 3118.119756]  ? wait_for_completion_io+0x10/0x10
[ 3118.124445]  __alloc_pages_nodemask+0x232f/0x2890
[ 3118.129309]  ? debug_check_no_obj_freed+0x201/0x490
[ 3118.134341]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3118.139186]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3118.144301]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3118.148926]  alloc_new_node_page+0x2b6/0x400
[ 3118.153350]  migrate_pages+0x528/0x2fe0
[ 3118.157333]  ? mpol_set_nodemask+0x450/0x450
[ 3118.161758]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3118.167306]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3118.172689]  kernel_move_pages+0xde2/0x1820
[ 3118.177030]  ? migrate_pages+0x2fe0/0x2fe0
[ 3118.181278]  ? retint_kernel+0x2d/0x2d
[ 3118.185182]  __x64_sys_move_pages+0xdd/0x1b0
[ 3118.189596]  ? __se_compat_sys_move_pages+0x130/0x130
[ 3118.194796]  do_syscall_64+0xf9/0x620
[ 3118.198615]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3118.203817] RIP: 0033:0x7fe0a8319e99
[ 3118.207537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3118.226447] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3118.234160] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3118.241436] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3118.248711] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3118.255986] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3118.263262] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
[ 3118.286644] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3118.288630] CPU: 0 PID: 28303 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3118.300073] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3118.306324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3118.306331] Call Trace:
[ 3118.306353]  dump_stack+0x1fc/0x2ef
[ 3118.306373]  warn_alloc.cold+0x7b/0x18f
[ 3118.306391]  ? zone_watermark_ok_safe+0x260/0x260
[ 3118.306405]  ? try_to_free_pages+0x2d7/0x7c0
[ 3118.306429]  ? wait_for_completion_io+0x10/0x10
[ 3118.344893]  __alloc_pages_nodemask+0x232f/0x2890
[ 3118.349745]  ? debug_check_no_obj_freed+0x201/0x490
[ 3118.354773]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3118.359620]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3118.364732]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3118.369348]  alloc_new_node_page+0x2b6/0x400
[ 3118.373763]  migrate_pages+0x528/0x2fe0
[ 3118.377742]  ? mpol_set_nodemask+0x450/0x450
[ 3118.382157]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3118.387697]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3118.393071]  kernel_move_pages+0xde2/0x1820
[ 3118.397403]  ? migrate_pages+0x2fe0/0x2fe0
[ 3118.401637]  ? __se_sys_futex+0x28f/0x3b0
[ 3118.405783]  ? __se_sys_futex+0x298/0x3b0
[ 3118.409934]  ? do_futex+0x1880/0x1880
[ 3118.413737]  __x64_sys_move_pages+0xdd/0x1b0
[ 3118.418154]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3118.422735]  do_syscall_64+0xf9/0x620
[ 3118.426547]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3118.431731] RIP: 0033:0x7f12f54cce99
[ 3118.435530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
15:31:33 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x80000000}, @ldst={0x2, 0x3, 0x2, 0x6, 0x2, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x20, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x8, '\x00', r0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3000, 0xb, 0x40, 0xffffffff}, 0x10, 0x0, r1, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@private1, @in6=@private1}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x80000000}, @ldst={0x2, 0x3, 0x2, 0x6, 0x2, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x20, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x8, '\x00', r0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3000, 0xb, 0x40, 0xffffffff}, 0x10, 0x0, r1, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async)
bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

[ 3118.454427] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3118.462224] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3118.469493] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3118.476767] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3118.484041] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3118.491318] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3118.499505] warn_alloc_show_mem: 3 callbacks suppressed
[ 3118.499510] Mem-Info:
[ 3118.506104] CPU: 0 PID: 28311 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3118.511060] active_anon:246297 inactive_anon:67444 isolated_anon:1349
[ 3118.511060]  active_file:4242 inactive_file:85169 isolated_file:0
[ 3118.511060]  unevictable:0 dirty:135 writeback:0 unstable:0
[ 3118.511060]  slab_reclaimable:136766 slab_unreclaimable:316671
[ 3118.511060]  mapped:75954 shmem:71879 pagetables:22339 bounce:0
[ 3118.511060]  free:462029 free_pcp:844 free_cma:0
[ 3118.515381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3118.515387] Call Trace:
[ 3118.515408]  dump_stack+0x1fc/0x2ef
[ 3118.515427]  warn_alloc.cold+0x7b/0x18f
[ 3118.515446]  ? zone_watermark_ok_safe+0x260/0x260
[ 3118.515481]  ? try_to_free_pages+0x2d7/0x7c0
[ 3118.578741]  ? wait_for_completion_io+0x10/0x10
[ 3118.583439]  __alloc_pages_nodemask+0x232f/0x2890
[ 3118.588321]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3118.592529] Node 0 active_anon:826188kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3118.593186]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3118.593204]  ? rcu_nmi_exit+0xb3/0x180
[ 3118.629681]  ? alloc_new_node_page+0x24/0x400
[ 3118.631013] Node 1 active_anon:159000kB inactive_anon:100268kB active_file:16964kB inactive_file:340672kB unevictable:0kB isolated(anon):5396kB isolated(file):0kB mapped:92124kB dirty:540kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3118.634188]  alloc_new_node_page+0x2b6/0x400
[ 3118.634210]  migrate_pages+0x528/0x2fe0
[ 3118.665086] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3118.667079]  ? mpol_set_nodemask+0x450/0x450
[ 3118.667110]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3118.671138] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3118.697439]  ? lock_downgrade+0x720/0x720
[ 3118.697454]  ? lock_acquire+0x170/0x3c0
[ 3118.697468]  ? __might_fault+0xef/0x1d0
[ 3118.697491]  kernel_move_pages+0xde2/0x1820
[ 3118.697515]  ? migrate_pages+0x2fe0/0x2fe0
[ 3118.697529]  ? __se_sys_futex+0x28f/0x3b0
[ 3118.697545]  ? __se_sys_futex+0x298/0x3b0
[ 3118.708973] Node 0 DMA32 free:35856kB min:35996kB low:44992kB high:53988kB active_anon:826076kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:504kB local_pcp:484kB free_cma:0kB
[ 3118.712567]  ? do_futex+0x1880/0x1880
[ 3118.712590]  __x64_sys_move_pages+0xdd/0x1b0
[ 3118.712607]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3118.719033] lowmem_reserve[]: 0 0 1 1 1
[ 3118.720705]  do_syscall_64+0xf9/0x620
[ 3118.720725]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3118.720740] RIP: 0033:0x7f992dec9e99
[ 3118.726856] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3118.728995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3118.729003] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3118.729016] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3118.729027] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3118.733314] lowmem_reserve[]: 0 0 0 0 0
[ 3118.737374] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3118.737382] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3118.737391] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3118.740065] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3118.748643] Node 1 Normal free:1800448kB min:53876kB low:67344kB high:80812kB active_anon:159000kB inactive_anon:100268kB active_file:16964kB inactive_file:340672kB unevictable:0kB writepending:540kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:45984kB pagetables:76664kB bounce:0kB free_pcp:2852kB local_pcp:1260kB free_cma:0kB
[ 3118.803011] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3118.897466] lowmem_reserve[]: 0 0 0 0 0
[ 3118.912677] CPU: 0 PID: 28312 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3118.954328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3118.963687] Call Trace:
[ 3118.966298]  dump_stack+0x1fc/0x2ef
[ 3118.969942]  warn_alloc.cold+0x7b/0x18f
[ 3118.973930]  ? zone_watermark_ok_safe+0x260/0x260
[ 3118.978789]  ? try_to_free_pages+0x2d7/0x7c0
[ 3118.983219]  ? wait_for_completion_io+0x10/0x10
[ 3118.987913]  __alloc_pages_nodemask+0x232f/0x2890
[ 3118.992783]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3118.997659]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3119.002429]  ? rcu_nmi_exit+0xb3/0x180
[ 3119.006347]  alloc_new_node_page+0x2b6/0x400
[ 3119.010763]  migrate_pages+0x528/0x2fe0
[ 3119.014743]  ? mpol_set_nodemask+0x450/0x450
[ 3119.019165]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3119.024704]  ? lock_downgrade+0x720/0x720
[ 3119.028852]  ? lock_acquire+0x170/0x3c0
[ 3119.032830]  ? __might_fault+0xef/0x1d0
[ 3119.036816]  kernel_move_pages+0xde2/0x1820
[ 3119.041152]  ? migrate_pages+0x2fe0/0x2fe0
[ 3119.045389]  ? retint_kernel+0x2d/0x2d
[ 3119.049297]  __x64_sys_move_pages+0xdd/0x1b0
[ 3119.053722]  ? do_syscall_64+0x56/0x620
[ 3119.057701]  do_syscall_64+0xf9/0x620
[ 3119.061512]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3119.065473] Node 0 DMA: 5*4kB (ME) 25*8kB (UMH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3119.066699] RIP: 0033:0x7f6a683bfe99
[ 3119.066714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
15:31:34 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:34 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3119.066722] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3119.066736] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3119.066744] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3119.066756] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3119.134444] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3119.141718] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3119.237137] Node 0 DMA32: 2012*4kB (UME) 1836*8kB (UME) 647*16kB (UME) 124*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37056kB
[ 3119.291646] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
15:31:34 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3119.383093] Node 1 Normal: 4012*4kB (UME) 2456*8kB (UME) 1750*16kB (UME) 2430*32kB (UME) 1103*64kB (UME) 1599*128kB (M) 1149*256kB (M) 771*512kB (UME) 391*1024kB (UME) 3*2048kB (ME) 70*4096kB (M) = 1798864kB
15:31:34 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3119.497104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3119.507789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3119.516877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3119.527336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3119.536409] 82458 total pagecache pages
[ 3119.540530] 0 pages in swap cache
15:31:34 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe80000000000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3119.544108] Swap cache stats: add 0, delete 0, find 0/0
[ 3119.550042] Free swap  = 0kB
[ 3119.553203] Total swap = 0kB
[ 3119.556684] 2097051 pages RAM
[ 3119.569542] 0 pages HighMem/MovableOnly
[ 3119.590315] 369649 pages reserved
[ 3119.601974] 0 pages cma reserved
15:31:34 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa0300907800"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:35 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:35 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:35 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:35 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe80000000000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3120.480465] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3120.539690] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3120.557902] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3120.571819] CPU: 0 PID: 28380 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3120.579719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3120.589074] Call Trace:
[ 3120.591677]  dump_stack+0x1fc/0x2ef
[ 3120.595325]  warn_alloc.cold+0x7b/0x18f
[ 3120.599324]  ? zone_watermark_ok_safe+0x260/0x260
[ 3120.604178]  ? try_to_free_pages+0x2d7/0x7c0
[ 3120.608610]  ? wait_for_completion_io+0x10/0x10
[ 3120.613303]  __alloc_pages_nodemask+0x232f/0x2890
[ 3120.618162]  ? debug_check_no_obj_freed+0x201/0x490
[ 3120.623197]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3120.628046]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3120.633158]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3120.637777]  alloc_new_node_page+0x2b6/0x400
[ 3120.642196]  migrate_pages+0x528/0x2fe0
[ 3120.646189]  ? mpol_set_nodemask+0x450/0x450
[ 3120.650616]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3120.656160]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3120.661537]  kernel_move_pages+0xde2/0x1820
[ 3120.665875]  ? migrate_pages+0x2fe0/0x2fe0
[ 3120.670117]  ? __se_sys_futex+0x28f/0x3b0
[ 3120.674272]  ? __se_sys_futex+0x298/0x3b0
[ 3120.678437]  ? do_futex+0x1880/0x1880
[ 3120.682253]  __x64_sys_move_pages+0xdd/0x1b0
[ 3120.686677]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3120.691269]  do_syscall_64+0xf9/0x620
[ 3120.695086]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3120.700276] RIP: 0033:0x7f1e38c8fe99
[ 3120.704009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3120.722917] RSP: 002b:00007f1e375e4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3120.730631] RAX: ffffffffffffffda RBX: 00007f1e38da3030 RCX: 00007f1e38c8fe99
15:31:35 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x0, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:35 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

[ 3120.737909] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3120.745181] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3120.752457] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3120.759817] R13: 00007ffcbbb481bf R14: 00007f1e375e4300 R15: 0000000000022000
[ 3120.886790] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3120.960284] CPU: 0 PID: 28364 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3120.968296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3120.977656] Call Trace:
[ 3120.980303]  dump_stack+0x1fc/0x2ef
[ 3120.983948]  warn_alloc.cold+0x7b/0x18f
[ 3120.987933]  ? zone_watermark_ok_safe+0x260/0x260
[ 3120.992784]  ? try_to_free_pages+0x2d7/0x7c0
[ 3120.997209]  ? wait_for_completion_io+0x10/0x10
[ 3121.001895]  __alloc_pages_nodemask+0x232f/0x2890
[ 3121.006752]  ? debug_check_no_obj_freed+0x201/0x490
[ 3121.011788]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3121.016635]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3121.021749]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3121.026363]  alloc_new_node_page+0x2b6/0x400
[ 3121.030783]  migrate_pages+0x528/0x2fe0
[ 3121.034770]  ? mpol_set_nodemask+0x450/0x450
[ 3121.039192]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3121.044738]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3121.050125]  kernel_move_pages+0xde2/0x1820
[ 3121.054467]  ? migrate_pages+0x2fe0/0x2fe0
[ 3121.058714]  ? retint_kernel+0x2d/0x2d
[ 3121.062612]  __x64_sys_move_pages+0xdd/0x1b0
[ 3121.067021]  ? do_syscall_64+0x56/0x620
[ 3121.070998]  do_syscall_64+0xf9/0x620
[ 3121.074810]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3121.080004] RIP: 0033:0x7f6a683bfe99
[ 3121.083723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3121.102632] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3121.110352] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3121.117220] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3121.117621] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3121.117629] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3121.117637] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3121.117649] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3121.129889] syz-executor.1 cpuset=/ mems_allowed=0-1
15:31:36 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe80000000000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3121.240323] CPU: 1 PID: 28376 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3121.248241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3121.257696] Call Trace:
[ 3121.260295]  dump_stack+0x1fc/0x2ef
[ 3121.263942]  warn_alloc.cold+0x7b/0x18f
[ 3121.265791] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3121.268013]  ? zone_watermark_ok_safe+0x260/0x260
[ 3121.268030]  ? try_to_free_pages+0x2d7/0x7c0
[ 3121.268056]  ? wait_for_completion_io+0x10/0x10
[ 3121.268079]  __alloc_pages_nodemask+0x232f/0x2890
[ 3121.288745] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3121.289082]  ? rcu_nmi_exit+0xb3/0x180
[ 3121.307698]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3121.312544]  ? _raw_spin_unlock_irqrestore+0xa3/0xe0
[ 3121.317681]  alloc_new_node_page+0x2b6/0x400
[ 3121.322096]  migrate_pages+0x528/0x2fe0
[ 3121.326078]  ? mpol_set_nodemask+0x450/0x450
[ 3121.330492]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3121.336032]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3121.341432]  kernel_move_pages+0xde2/0x1820
[ 3121.345778]  ? migrate_pages+0x2fe0/0x2fe0
[ 3121.350022]  ? __se_sys_futex+0x28f/0x3b0
[ 3121.354187]  ? __se_sys_futex+0x298/0x3b0
[ 3121.358349]  ? do_futex+0x1880/0x1880
[ 3121.362161]  __x64_sys_move_pages+0xdd/0x1b0
[ 3121.366578]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3121.371159]  do_syscall_64+0xf9/0x620
[ 3121.374969]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3121.380159] RIP: 0033:0x7fe0a8319e99
[ 3121.383868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3121.402764] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3121.410468] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3121.417742] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3121.425007] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3121.432275] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3121.439540] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
[ 3121.460140] CPU: 0 PID: 28407 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3121.468049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3121.477412] Call Trace:
[ 3121.480012]  dump_stack+0x1fc/0x2ef
[ 3121.483657]  warn_alloc.cold+0x7b/0x18f
[ 3121.487649]  ? zone_watermark_ok_safe+0x260/0x260
[ 3121.492508]  ? try_to_free_pages+0x2d7/0x7c0
[ 3121.496943]  ? wait_for_completion_io+0x10/0x10
[ 3121.501636]  __alloc_pages_nodemask+0x232f/0x2890
[ 3121.506520]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3121.511407]  alloc_new_node_page+0x2b6/0x400
[ 3121.515829]  migrate_pages+0x528/0x2fe0
[ 3121.519821]  ? mpol_set_nodemask+0x450/0x450
[ 3121.524254]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3121.529801]  ? lock_downgrade+0x720/0x720
[ 3121.533133] warn_alloc_show_mem: 4 callbacks suppressed
[ 3121.533137] Mem-Info:
[ 3121.533952]  ? lock_acquire+0x170/0x3c0
[ 3121.533968]  ? __might_fault+0xef/0x1d0
[ 3121.533994]  kernel_move_pages+0xde2/0x1820
[ 3121.534016]  ? migrate_pages+0x2fe0/0x2fe0
[ 3121.539747] active_anon:246567 inactive_anon:67444 isolated_anon:1287
[ 3121.539747]  active_file:4246 inactive_file:85187 isolated_file:0
[ 3121.539747]  unevictable:0 dirty:156 writeback:0 unstable:0
[ 3121.539747]  slab_reclaimable:136758 slab_unreclaimable:316767
[ 3121.539747]  mapped:76120 shmem:71879 pagetables:22410 bounce:0
[ 3121.539747]  free:461308 free_pcp:1025 free_cma:0
[ 3121.541758]  ? __se_sys_futex+0x28f/0x3b0
[ 3121.541772]  ? __se_sys_futex+0x298/0x3b0
[ 3121.541791]  ? do_futex+0x1880/0x1880
[ 3121.541811]  __x64_sys_move_pages+0xdd/0x1b0
[ 3121.546100] Node 0 active_anon:824452kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
15:31:36 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3121.549725]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3121.549740]  do_syscall_64+0xf9/0x620
[ 3121.549761]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3121.549775] RIP: 0033:0x7f12f54cce99
[ 3121.554443] Node 1 active_anon:161816kB inactive_anon:100268kB active_file:16980kB inactive_file:340744kB unevictable:0kB isolated(anon):5148kB isolated(file):0kB mapped:92788kB dirty:624kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
15:31:36 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3121.558297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3121.558306] RSP: 002b:00007f12f3e21168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3121.558320] RAX: ffffffffffffffda RBX: 00007f12f55e0030 RCX: 00007f12f54cce99
[ 3121.558329] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3121.558337] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3121.558365] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
15:31:36 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="7bff07"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3121.594621] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3121.597093] R13: 00007ffdb64c147f R14: 00007f12f3e21300 R15: 0000000000022000
15:31:37 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x0, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3122.204567] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3122.209642] Node 0 DMA32 free:38512kB min:35996kB low:44992kB high:53988kB active_anon:822904kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1620kB local_pcp:220kB free_cma:0kB
[ 3122.413927] lowmem_reserve[]: 0 0 1 1 1
[ 3122.485371] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
15:31:37 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3122.544738] lowmem_reserve[]: 0 0 0 0 0
[ 3122.548761] Node 1 Normal free:1796400kB min:53876kB low:67344kB high:80812kB active_anon:160972kB inactive_anon:100268kB active_file:16984kB inactive_file:340780kB unevictable:0kB writepending:672kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46336kB pagetables:77028kB bounce:0kB free_pcp:2764kB local_pcp:1436kB free_cma:0kB
[ 3122.582869] lowmem_reserve[]: 0 0 0 0 0
[ 3122.587417] Node 0 DMA: 5*4kB (ME) 24*8kB (UH) 9*16kB (UMH) 1*32kB (H) 0*64kB 3*128kB (UM) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11012kB
[ 3122.608461] Node 0 DMA32: 1992*4kB (UME) 2019*8kB (UME) 630*16kB (UME) 119*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38008kB
[ 3122.623113] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3122.635328] Node 1 Normal: 4055*4kB (ME) 2260*8kB (ME) 1799*16kB (UME) 2455*32kB (UME) 1133*64kB (UME) 1616*128kB (M) 1160*256kB (M) 777*512kB (UME) 394*1024kB (UME) 2*2048kB (ME) 67*4096kB (M) = 1797772kB
[ 3122.701131] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3122.716003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
15:31:37 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3122.742204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3122.758506] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3122.763729] CPU: 1 PID: 28431 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3122.771612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3122.780957] Call Trace:
[ 3122.783540]  dump_stack+0x1fc/0x2ef
[ 3122.787167]  warn_alloc.cold+0x7b/0x18f
[ 3122.791134]  ? zone_watermark_ok_safe+0x260/0x260
[ 3122.795981]  ? try_to_free_pages+0x2d7/0x7c0
[ 3122.800418]  ? wait_for_completion_io+0x10/0x10
[ 3122.805088]  __alloc_pages_nodemask+0x232f/0x2890
[ 3122.809926]  ? debug_check_no_obj_freed+0x201/0x490
[ 3122.814941]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3122.819772]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3122.824867]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3122.829456]  alloc_new_node_page+0x2b6/0x400
[ 3122.833857]  migrate_pages+0x528/0x2fe0
[ 3122.837824]  ? mpol_set_nodemask+0x450/0x450
[ 3122.842228]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3122.847766]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3122.853152]  kernel_move_pages+0xde2/0x1820
[ 3122.857472]  ? migrate_pages+0x2fe0/0x2fe0
[ 3122.861785]  ? __se_sys_futex+0x28f/0x3b0
[ 3122.865918]  ? __se_sys_futex+0x298/0x3b0
[ 3122.870075]  ? do_futex+0x1880/0x1880
[ 3122.873884]  __x64_sys_move_pages+0xdd/0x1b0
[ 3122.878306]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3122.883057]  do_syscall_64+0xf9/0x620
[ 3122.886858]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3122.892038] RIP: 0033:0x7f6a683bfe99
[ 3122.895737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3122.914626] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3122.922328] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3122.929585] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3122.936842] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3122.944097] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3122.951351] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3122.980843] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3123.026384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3123.098319] 82478 total pagecache pages
[ 3123.149835] 0 pages in swap cache
[ 3123.178319] Swap cache stats: add 0, delete 0, find 0/0
[ 3123.237330] Free swap  = 0kB
[ 3123.256997] Total swap = 0kB
[ 3123.283034] 2097051 pages RAM
[ 3123.339617] 0 pages HighMem/MovableOnly
15:31:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:38 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="7bff07"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="7bff07"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

[ 3123.374580] warn_alloc_show_mem: 3 callbacks suppressed
[ 3123.374585] Mem-Info:
[ 3123.379269] 369649 pages reserved
[ 3123.385200] active_anon:247075 inactive_anon:67444 isolated_anon:1106
[ 3123.385200]  active_file:4247 inactive_file:85199 isolated_file:0
[ 3123.385200]  unevictable:0 dirty:170 writeback:0 unstable:0
[ 3123.385200]  slab_reclaimable:136758 slab_unreclaimable:316990
[ 3123.385200]  mapped:76132 shmem:71879 pagetables:22456 bounce:0
[ 3123.385200]  free:460617 free_pcp:1071 free_cma:0
[ 3123.420933] 0 pages cma reserved
15:31:38 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe80000000000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3123.505267] Node 0 active_anon:825560kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
15:31:38 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="7bff07"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="7bff07"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

[ 3123.636547] Node 1 active_anon:159772kB inactive_anon:100268kB active_file:16984kB inactive_file:340792kB unevictable:0kB isolated(anon):6064kB isolated(file):0kB mapped:92836kB dirty:680kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3123.982998] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
15:31:39 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:39 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3124.236801] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3124.241927] Node 0 DMA32 free:41896kB min:35996kB low:44992kB high:53988kB active_anon:824016kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:2856kB local_pcp:1500kB free_cma:0kB
[ 3124.271427] lowmem_reserve[]: 0 0 1 1 1
[ 3124.276782] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3124.479900] lowmem_reserve[]: 0 0 0 0 0
[ 3124.516948] Node 1 Normal free:1794656kB min:53876kB low:67344kB high:80812kB active_anon:159936kB inactive_anon:100268kB active_file:16992kB inactive_file:340804kB unevictable:0kB writepending:708kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46272kB pagetables:77096kB bounce:0kB free_pcp:2644kB local_pcp:1232kB free_cma:0kB
[ 3124.797843] lowmem_reserve[]: 0 0 0 0 0
[ 3124.822474] Node 0 DMA: 5*4kB (ME) 25*8kB (UMH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3124.927234] Node 0 DMA32: 2134*4kB (UME) 2349*8kB (UME) 718*16kB (UME) 119*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42624kB
[ 3125.034877] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3125.116784] Node 1 Normal: 4179*4kB (UME) 2405*8kB (UME) 1692*16kB (UME) 2414*32kB (UME) 1139*64kB (UME) 1622*128kB (M) 1166*256kB (M) 788*512kB (UME) 397*1024kB (UME) 4*2048kB (ME) 64*4096kB (M) = 1799604kB
[ 3125.144322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3125.184303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3125.211228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3125.220876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
15:31:40 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:40 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="6e6264112c00"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:40 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd0000000000"], 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:40 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe80000000000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:40 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbca"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:40 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3125.244255] 82486 total pagecache pages
[ 3125.248259] 0 pages in swap cache
[ 3125.251712] Swap cache stats: add 0, delete 0, find 0/0
[ 3125.258236] Free swap  = 0kB
[ 3125.261300] Total swap = 0kB
[ 3125.268220] 2097051 pages RAM
[ 3125.271706] 0 pages HighMem/MovableOnly
[ 3125.276296] 369649 pages reserved
[ 3125.279758] 0 pages cma reserved
15:31:41 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe80000000000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:41 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:41 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:41 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="6e6264112c00"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:41 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:41 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:42 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/84], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:42 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:42 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="6e6264112c00"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="6e6264112c00"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

15:31:42 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:42 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:42 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:42 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001640)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0xc810}, 0x40045)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
r2 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
sendmmsg$sock(r2, &(0x7f00000014c0)=[{{&(0x7f00000002c0)=@nfc={0x27, 0x1, 0x0, 0x3}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000380)="b1", 0x1}, {&(0x7f00000003c0)='P', 0x1}, {&(0x7f0000000400)="c15aa69b21f95e0ed24320be115a2ff52ff1a45f4feeef6ef7481039ef1e0fb58aa8de3e8508a16d84fbf82320becfbbbb445c8eeba4dffa409e66", 0x3b}, {&(0x7f00000004c0)="ff339fc2001a8cce81707cdf61905e3b6e299367a3596a518ed01a88eab57e83ca7e4ecf440fcba8cbc98d93b76ebca23db4b7e87016cee1c677eff37072884970a9a4418cf4ef0531549ff498bb800934b9f17ec06595d6aff0236cc444bc07748d3b70eada155c34688d1b675600935c7ee6f6b43df49c37d5197a0f8e40d5ab0241b4056e0091f0cb77eecb6ff8c45d6ca11656c436d405d66ac60cb78498e746505f9fe9460b1afe3d6acca934a9aa80", 0xb2}, {&(0x7f0000000580)="c083601fc463f3d76d54e8ddf33b81fbf9e67c57a507f309c896b0e70d81e6104bff65ce62dcf506bdba9f519e26d66bd6f068c62c3bb666d0b8e8cc1c10796249e6aaad8627e4c001d4e5105589ba81fc045c2f132e7b01396e85591b59f14c0f8fcbe5903bf49ad7464828eb7e952000392cb5a9c0a32d422fcf94a2eb0cd1fd850c9b4204cec811c870792f5db7e515557c68c3cbcf72a6637a1a0ecd195f182e916571477a61eb0149041f826e57345e5769d5a53142646c68a1c24b7b2a94774d2de19ec6a8ad5395956503f5d1321b7a21ae2bfa53a50473c6624327c489a53e", 0xe3}, {&(0x7f0000000680)="8943fd1aa50fc48f37883cae63060452c0605f98537b4b6f2dc7643d79cecc5c29a6ee0863c9079a3e88f3c0f2bcd401521d25fafca75604b20533a74d8916339dcba67352d5911f342213a598aa7a160fac4938c4e4b57a", 0x58}, {&(0x7f0000000700)="a2b0c0d569b4d48c3b396884db97dbcdbbab64efe639da860a3f52039769ee4464765de0a84f7d52bee8c11b75ff8d6d08eed9b8d45bb2ac32753d57dc23f570ee289badf1d0dc1d613e841f4bc94b57052779203dfcf2e8cf972b3474ba46d1ba3476a86232eb2b5962aeb9d0ce33ece6b001e250a90bc0266f73988726c8c185ed28845e90e7c1e837e7f092908bf53c4217bb75", 0x95}, {&(0x7f00000007c0)="5090494d4e730ba014e1f210a29b6ddcee741d6ba4d01bb48ed79223acf045c4064f5e00434f9d1e135e53297016051c660ce1b7bb5a08ddc072e15ce8c380a78165e2b0fd4f7c7d8ff7c7d64f11e15dfaa5fee80a092005c497190005ff0dc46bd0bf76", 0x64}, {&(0x7f0000000840)="58e7aa6f154123c731e2200a3515196bb3a0bcaefd3f365d0835e6bae70bbf575f2ddb70c8e3bda62f6ee8338d849262d4c1bb1b64d4b2181303a6f54201864b8cd2d750b6adda196d4c8413642d48fae5d8b455d66358a095052d5b9498ae133101b3ada105fdfec7cee0ecb5eff5b74a2eea48a524646b59b0b27d08ab1ddec2b7cb413cd6eb8151084e5af12da82602ed3b96e8278cd217907cdad2fc648e1101d8851b8a3e67fcd5c9bfa7043489601d7ca5bde01442d1570882ea8403e84a45f448da9e0edc460e0b6ee16f9a84fb757c34f95bb37b728508cf2d33e5ee802aee5480229071d33c17cbe5a5cf8197f7b1a6f3d0a3b6e5", 0xf9}], 0x9, &(0x7f0000000a00)=[@mark={{0x14, 0x1, 0x24, 0xc8}}], 0x18}}, {{&(0x7f0000000a40)=@nfc={0x27, 0x1, 0x1, 0x1}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="6b7a62dc7ea82c6f890b27e624666cffed542693b21851e9af711a01e3a02b153e37408ac60a224ad24e02a0588b66d83815762499f0257d5266c55a23513230398ee59add9c969989be8a38e4dccf6eb2362c747bcfdd66a394dadf8408", 0x5e}], 0x1, &(0x7f0000000b80)=[@txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000bc0)="e7b0918315988998b3c745a637152219152a88e888b804a93456159c269c47bb94387bf9c2187d27379400fd34624a064495932408efcb3f9b3305c253b8b7f0cefa47d79983aace02b681a4f608385b09e99e00928a427463a96cf861bdbfdb2bc341aac9d757f4c16386641958b0709679eac1488e3e7fa55aee2cac132b83229cd76cfd62cf0e0377", 0x8a}, {&(0x7f0000000c80)="9e4b4ec506101720d8dabee96c661527d46bb93e1b0ecb71cea78da5cb4eb0eba3a211420f19c0ff83fc5edd462afe494160908aa23b4bd74e1064c35c254fe08b707c819b9492938a8d8c06723c664ea8504d7e594597c9f5e8411ac28955bdf583d3a8aa4d2f8752800ef2f03aae681781b2fbd7dbf09fa20cb5bad038b3cf7953c55dbe004731efb1f6e438dba9d47f0f08f1c9805f4ce0599aaf61b1aa35d4b079bd47e61cfec01644f51781b6ed291994342edd39496c5b24f04eb10d6d709679a79a3c83ad8505fcd6511173d29e2f3a49457f8627", 0xd8}, {&(0x7f0000000d80)="05e0843ff4c64cd0dc04485d34083f54c98a232d684de2108d121fa8a15dd10fd6aedcd9b1b0fc76c816e5b10a0b3e161c0fe6aaeb732247c4413a0972d3544c43f23c94490dc3ebe42d6f8fee01407bcabc963355bb253a09", 0x59}], 0x3, &(0x7f0000000e40)=[@timestamping={{0x14, 0x1, 0x25, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="4b38ce3ef174fd113e17396f4a5668350ded1164deb7c82a26f97aeee250beaf19", 0x21}], 0x1, &(0x7f0000000f00)=[@txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}}, {{&(0x7f0000000f80)=@rc={0x1f, @none, 0x1}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001000)="f41343eadb10670d8b1303281571698f6f5dac9e8b533ee984c536691d14e7d6a9507f5624eb7bf6de44", 0x2a}, {&(0x7f0000001040)="fb05d4cb633555c0f9cd2deb238666611ca516a6fb7d", 0x16}, {&(0x7f0000001080)="511c371db9c31cf84989f4b74465d12e083f2cc891af1b7dabdb3c81e0", 0x1d}, {&(0x7f00000010c0)="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", 0xfd}, {&(0x7f00000011c0)="7ae999c677f261c6b27f8bb63f28ef74fcca8cf6248e69807581a9478855825a8093f3918cbcf4e9dea128e24765ac94", 0x30}, {&(0x7f0000001200)="b0b092df12857be25d1771b0e969ecf10f4e987befdf649ed9c5f3f6830c40a69ac08c027d89fe6f16b8ced39b565b6ddff88c18f77dab7cb0640d", 0x3b}], 0x6, &(0x7f00000012c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001340)="c3134f1ec8928318a8565fe1", 0xc}], 0x1, &(0x7f00000013c0)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7ba8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x6ee}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xd8}}], 0x6, 0x20000080)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:43 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/84], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:43 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:43 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:43 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:43 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:44 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001640)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0xc810}, 0x40045) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
r2 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async)
sendmmsg$sock(r2, &(0x7f00000014c0)=[{{&(0x7f00000002c0)=@nfc={0x27, 0x1, 0x0, 0x3}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000380)="b1", 0x1}, {&(0x7f00000003c0)='P', 0x1}, {&(0x7f0000000400)="c15aa69b21f95e0ed24320be115a2ff52ff1a45f4feeef6ef7481039ef1e0fb58aa8de3e8508a16d84fbf82320becfbbbb445c8eeba4dffa409e66", 0x3b}, {&(0x7f00000004c0)="ff339fc2001a8cce81707cdf61905e3b6e299367a3596a518ed01a88eab57e83ca7e4ecf440fcba8cbc98d93b76ebca23db4b7e87016cee1c677eff37072884970a9a4418cf4ef0531549ff498bb800934b9f17ec06595d6aff0236cc444bc07748d3b70eada155c34688d1b675600935c7ee6f6b43df49c37d5197a0f8e40d5ab0241b4056e0091f0cb77eecb6ff8c45d6ca11656c436d405d66ac60cb78498e746505f9fe9460b1afe3d6acca934a9aa80", 0xb2}, {&(0x7f0000000580)="c083601fc463f3d76d54e8ddf33b81fbf9e67c57a507f309c896b0e70d81e6104bff65ce62dcf506bdba9f519e26d66bd6f068c62c3bb666d0b8e8cc1c10796249e6aaad8627e4c001d4e5105589ba81fc045c2f132e7b01396e85591b59f14c0f8fcbe5903bf49ad7464828eb7e952000392cb5a9c0a32d422fcf94a2eb0cd1fd850c9b4204cec811c870792f5db7e515557c68c3cbcf72a6637a1a0ecd195f182e916571477a61eb0149041f826e57345e5769d5a53142646c68a1c24b7b2a94774d2de19ec6a8ad5395956503f5d1321b7a21ae2bfa53a50473c6624327c489a53e", 0xe3}, {&(0x7f0000000680)="8943fd1aa50fc48f37883cae63060452c0605f98537b4b6f2dc7643d79cecc5c29a6ee0863c9079a3e88f3c0f2bcd401521d25fafca75604b20533a74d8916339dcba67352d5911f342213a598aa7a160fac4938c4e4b57a", 0x58}, {&(0x7f0000000700)="a2b0c0d569b4d48c3b396884db97dbcdbbab64efe639da860a3f52039769ee4464765de0a84f7d52bee8c11b75ff8d6d08eed9b8d45bb2ac32753d57dc23f570ee289badf1d0dc1d613e841f4bc94b57052779203dfcf2e8cf972b3474ba46d1ba3476a86232eb2b5962aeb9d0ce33ece6b001e250a90bc0266f73988726c8c185ed28845e90e7c1e837e7f092908bf53c4217bb75", 0x95}, {&(0x7f00000007c0)="5090494d4e730ba014e1f210a29b6ddcee741d6ba4d01bb48ed79223acf045c4064f5e00434f9d1e135e53297016051c660ce1b7bb5a08ddc072e15ce8c380a78165e2b0fd4f7c7d8ff7c7d64f11e15dfaa5fee80a092005c497190005ff0dc46bd0bf76", 0x64}, {&(0x7f0000000840)="58e7aa6f154123c731e2200a3515196bb3a0bcaefd3f365d0835e6bae70bbf575f2ddb70c8e3bda62f6ee8338d849262d4c1bb1b64d4b2181303a6f54201864b8cd2d750b6adda196d4c8413642d48fae5d8b455d66358a095052d5b9498ae133101b3ada105fdfec7cee0ecb5eff5b74a2eea48a524646b59b0b27d08ab1ddec2b7cb413cd6eb8151084e5af12da82602ed3b96e8278cd217907cdad2fc648e1101d8851b8a3e67fcd5c9bfa7043489601d7ca5bde01442d1570882ea8403e84a45f448da9e0edc460e0b6ee16f9a84fb757c34f95bb37b728508cf2d33e5ee802aee5480229071d33c17cbe5a5cf8197f7b1a6f3d0a3b6e5", 0xf9}], 0x9, &(0x7f0000000a00)=[@mark={{0x14, 0x1, 0x24, 0xc8}}], 0x18}}, {{&(0x7f0000000a40)=@nfc={0x27, 0x1, 0x1, 0x1}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="6b7a62dc7ea82c6f890b27e624666cffed542693b21851e9af711a01e3a02b153e37408ac60a224ad24e02a0588b66d83815762499f0257d5266c55a23513230398ee59add9c969989be8a38e4dccf6eb2362c747bcfdd66a394dadf8408", 0x5e}], 0x1, &(0x7f0000000b80)=[@txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000bc0)="e7b0918315988998b3c745a637152219152a88e888b804a93456159c269c47bb94387bf9c2187d27379400fd34624a064495932408efcb3f9b3305c253b8b7f0cefa47d79983aace02b681a4f608385b09e99e00928a427463a96cf861bdbfdb2bc341aac9d757f4c16386641958b0709679eac1488e3e7fa55aee2cac132b83229cd76cfd62cf0e0377", 0x8a}, {&(0x7f0000000c80)="9e4b4ec506101720d8dabee96c661527d46bb93e1b0ecb71cea78da5cb4eb0eba3a211420f19c0ff83fc5edd462afe494160908aa23b4bd74e1064c35c254fe08b707c819b9492938a8d8c06723c664ea8504d7e594597c9f5e8411ac28955bdf583d3a8aa4d2f8752800ef2f03aae681781b2fbd7dbf09fa20cb5bad038b3cf7953c55dbe004731efb1f6e438dba9d47f0f08f1c9805f4ce0599aaf61b1aa35d4b079bd47e61cfec01644f51781b6ed291994342edd39496c5b24f04eb10d6d709679a79a3c83ad8505fcd6511173d29e2f3a49457f8627", 0xd8}, {&(0x7f0000000d80)="05e0843ff4c64cd0dc04485d34083f54c98a232d684de2108d121fa8a15dd10fd6aedcd9b1b0fc76c816e5b10a0b3e161c0fe6aaeb732247c4413a0972d3544c43f23c94490dc3ebe42d6f8fee01407bcabc963355bb253a09", 0x59}], 0x3, &(0x7f0000000e40)=[@timestamping={{0x14, 0x1, 0x25, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="4b38ce3ef174fd113e17396f4a5668350ded1164deb7c82a26f97aeee250beaf19", 0x21}], 0x1, &(0x7f0000000f00)=[@txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}}, {{&(0x7f0000000f80)=@rc={0x1f, @none, 0x1}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001000)="f41343eadb10670d8b1303281571698f6f5dac9e8b533ee984c536691d14e7d6a9507f5624eb7bf6de44", 0x2a}, {&(0x7f0000001040)="fb05d4cb633555c0f9cd2deb238666611ca516a6fb7d", 0x16}, {&(0x7f0000001080)="511c371db9c31cf84989f4b74465d12e083f2cc891af1b7dabdb3c81e0", 0x1d}, {&(0x7f00000010c0)="0a75b22f76e8ca88578fb35426a5203727976c9c6d43db70309268a0cb7010ee7f35b4d940cd9eb3dcb323ce2c306242cd93b548b7f6b0ea9d5208e8efae25d7386646f601df5021b08c062bbbb4f3b5fe9bcf22de3b1ecbfb803a9bf6c2ab3fef0fa52f4fb097b9c912495f031e49876a2e43f4f6597879058b33e4651488b9541f663dbe1bfbca9c821e62eaab3e535a4245e71366640677b34f82682d1191827903a3bff341e2e9d99a7095de7f6ea3f29b171a76657bc012e0bcdc05e4221c33d2c6dff8f273d1dd5a7df92aa45372cd76ed370f85c5631c567d5e0d31b098703aa0dd579f15ec1f696b593b2a814e41cd2e01f19fc6ccc898fda9", 0xfd}, {&(0x7f00000011c0)="7ae999c677f261c6b27f8bb63f28ef74fcca8cf6248e69807581a9478855825a8093f3918cbcf4e9dea128e24765ac94", 0x30}, {&(0x7f0000001200)="b0b092df12857be25d1771b0e969ecf10f4e987befdf649ed9c5f3f6830c40a69ac08c027d89fe6f16b8ced39b565b6ddff88c18f77dab7cb0640d", 0x3b}], 0x6, &(0x7f00000012c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001340)="c3134f1ec8928318a8565fe1", 0xc}], 0x1, &(0x7f00000013c0)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7ba8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x6ee}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xd8}}], 0x6, 0x20000080) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:44 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/84], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:44 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:45 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:45 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001640)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0xc810}, 0x40045) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
r2 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
sendmmsg$sock(r2, &(0x7f00000014c0)=[{{&(0x7f00000002c0)=@nfc={0x27, 0x1, 0x0, 0x3}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000380)="b1", 0x1}, {&(0x7f00000003c0)='P', 0x1}, {&(0x7f0000000400)="c15aa69b21f95e0ed24320be115a2ff52ff1a45f4feeef6ef7481039ef1e0fb58aa8de3e8508a16d84fbf82320becfbbbb445c8eeba4dffa409e66", 0x3b}, {&(0x7f00000004c0)="ff339fc2001a8cce81707cdf61905e3b6e299367a3596a518ed01a88eab57e83ca7e4ecf440fcba8cbc98d93b76ebca23db4b7e87016cee1c677eff37072884970a9a4418cf4ef0531549ff498bb800934b9f17ec06595d6aff0236cc444bc07748d3b70eada155c34688d1b675600935c7ee6f6b43df49c37d5197a0f8e40d5ab0241b4056e0091f0cb77eecb6ff8c45d6ca11656c436d405d66ac60cb78498e746505f9fe9460b1afe3d6acca934a9aa80", 0xb2}, {&(0x7f0000000580)="c083601fc463f3d76d54e8ddf33b81fbf9e67c57a507f309c896b0e70d81e6104bff65ce62dcf506bdba9f519e26d66bd6f068c62c3bb666d0b8e8cc1c10796249e6aaad8627e4c001d4e5105589ba81fc045c2f132e7b01396e85591b59f14c0f8fcbe5903bf49ad7464828eb7e952000392cb5a9c0a32d422fcf94a2eb0cd1fd850c9b4204cec811c870792f5db7e515557c68c3cbcf72a6637a1a0ecd195f182e916571477a61eb0149041f826e57345e5769d5a53142646c68a1c24b7b2a94774d2de19ec6a8ad5395956503f5d1321b7a21ae2bfa53a50473c6624327c489a53e", 0xe3}, {&(0x7f0000000680)="8943fd1aa50fc48f37883cae63060452c0605f98537b4b6f2dc7643d79cecc5c29a6ee0863c9079a3e88f3c0f2bcd401521d25fafca75604b20533a74d8916339dcba67352d5911f342213a598aa7a160fac4938c4e4b57a", 0x58}, {&(0x7f0000000700)="a2b0c0d569b4d48c3b396884db97dbcdbbab64efe639da860a3f52039769ee4464765de0a84f7d52bee8c11b75ff8d6d08eed9b8d45bb2ac32753d57dc23f570ee289badf1d0dc1d613e841f4bc94b57052779203dfcf2e8cf972b3474ba46d1ba3476a86232eb2b5962aeb9d0ce33ece6b001e250a90bc0266f73988726c8c185ed28845e90e7c1e837e7f092908bf53c4217bb75", 0x95}, {&(0x7f00000007c0)="5090494d4e730ba014e1f210a29b6ddcee741d6ba4d01bb48ed79223acf045c4064f5e00434f9d1e135e53297016051c660ce1b7bb5a08ddc072e15ce8c380a78165e2b0fd4f7c7d8ff7c7d64f11e15dfaa5fee80a092005c497190005ff0dc46bd0bf76", 0x64}, {&(0x7f0000000840)="58e7aa6f154123c731e2200a3515196bb3a0bcaefd3f365d0835e6bae70bbf575f2ddb70c8e3bda62f6ee8338d849262d4c1bb1b64d4b2181303a6f54201864b8cd2d750b6adda196d4c8413642d48fae5d8b455d66358a095052d5b9498ae133101b3ada105fdfec7cee0ecb5eff5b74a2eea48a524646b59b0b27d08ab1ddec2b7cb413cd6eb8151084e5af12da82602ed3b96e8278cd217907cdad2fc648e1101d8851b8a3e67fcd5c9bfa7043489601d7ca5bde01442d1570882ea8403e84a45f448da9e0edc460e0b6ee16f9a84fb757c34f95bb37b728508cf2d33e5ee802aee5480229071d33c17cbe5a5cf8197f7b1a6f3d0a3b6e5", 0xf9}], 0x9, &(0x7f0000000a00)=[@mark={{0x14, 0x1, 0x24, 0xc8}}], 0x18}}, {{&(0x7f0000000a40)=@nfc={0x27, 0x1, 0x1, 0x1}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="6b7a62dc7ea82c6f890b27e624666cffed542693b21851e9af711a01e3a02b153e37408ac60a224ad24e02a0588b66d83815762499f0257d5266c55a23513230398ee59add9c969989be8a38e4dccf6eb2362c747bcfdd66a394dadf8408", 0x5e}], 0x1, &(0x7f0000000b80)=[@txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000bc0)="e7b0918315988998b3c745a637152219152a88e888b804a93456159c269c47bb94387bf9c2187d27379400fd34624a064495932408efcb3f9b3305c253b8b7f0cefa47d79983aace02b681a4f608385b09e99e00928a427463a96cf861bdbfdb2bc341aac9d757f4c16386641958b0709679eac1488e3e7fa55aee2cac132b83229cd76cfd62cf0e0377", 0x8a}, {&(0x7f0000000c80)="9e4b4ec506101720d8dabee96c661527d46bb93e1b0ecb71cea78da5cb4eb0eba3a211420f19c0ff83fc5edd462afe494160908aa23b4bd74e1064c35c254fe08b707c819b9492938a8d8c06723c664ea8504d7e594597c9f5e8411ac28955bdf583d3a8aa4d2f8752800ef2f03aae681781b2fbd7dbf09fa20cb5bad038b3cf7953c55dbe004731efb1f6e438dba9d47f0f08f1c9805f4ce0599aaf61b1aa35d4b079bd47e61cfec01644f51781b6ed291994342edd39496c5b24f04eb10d6d709679a79a3c83ad8505fcd6511173d29e2f3a49457f8627", 0xd8}, {&(0x7f0000000d80)="05e0843ff4c64cd0dc04485d34083f54c98a232d684de2108d121fa8a15dd10fd6aedcd9b1b0fc76c816e5b10a0b3e161c0fe6aaeb732247c4413a0972d3544c43f23c94490dc3ebe42d6f8fee01407bcabc963355bb253a09", 0x59}], 0x3, &(0x7f0000000e40)=[@timestamping={{0x14, 0x1, 0x25, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="4b38ce3ef174fd113e17396f4a5668350ded1164deb7c82a26f97aeee250beaf19", 0x21}], 0x1, &(0x7f0000000f00)=[@txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}}, {{&(0x7f0000000f80)=@rc={0x1f, @none, 0x1}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001000)="f41343eadb10670d8b1303281571698f6f5dac9e8b533ee984c536691d14e7d6a9507f5624eb7bf6de44", 0x2a}, {&(0x7f0000001040)="fb05d4cb633555c0f9cd2deb238666611ca516a6fb7d", 0x16}, {&(0x7f0000001080)="511c371db9c31cf84989f4b74465d12e083f2cc891af1b7dabdb3c81e0", 0x1d}, {&(0x7f00000010c0)="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", 0xfd}, {&(0x7f00000011c0)="7ae999c677f261c6b27f8bb63f28ef74fcca8cf6248e69807581a9478855825a8093f3918cbcf4e9dea128e24765ac94", 0x30}, {&(0x7f0000001200)="b0b092df12857be25d1771b0e969ecf10f4e987befdf649ed9c5f3f6830c40a69ac08c027d89fe6f16b8ced39b565b6ddff88c18f77dab7cb0640d", 0x3b}], 0x6, &(0x7f00000012c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001340)="c3134f1ec8928318a8565fe1", 0xc}], 0x1, &(0x7f00000013c0)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7ba8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x6ee}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xd8}}], 0x6, 0x20000080)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3130.186234] warn_alloc: 1 callbacks suppressed
[ 3130.186254] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3130.206247] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3130.206541] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3130.280944] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3130.318397] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3130.335023] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3130.343259] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3130.351787] CPU: 0 PID: 28662 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3130.359685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3130.369036] Call Trace:
[ 3130.371632]  dump_stack+0x1fc/0x2ef
[ 3130.375279]  warn_alloc.cold+0x7b/0x18f
[ 3130.379261]  ? zone_watermark_ok_safe+0x260/0x260
[ 3130.384112]  ? try_to_free_pages+0x2d7/0x7c0
[ 3130.388537]  ? wait_for_completion_io+0x10/0x10
[ 3130.393223]  __alloc_pages_nodemask+0x232f/0x2890
[ 3130.398082]  ? debug_check_no_obj_freed+0x201/0x490
[ 3130.403109]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3130.407955]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3130.413071]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3130.417685]  alloc_new_node_page+0x2b6/0x400
[ 3130.422096]  migrate_pages+0x528/0x2fe0
[ 3130.426075]  ? mpol_set_nodemask+0x450/0x450
[ 3130.430498]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3130.436035]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3130.441497]  kernel_move_pages+0xde2/0x1820
[ 3130.445841]  ? migrate_pages+0x2fe0/0x2fe0
[ 3130.450080]  ? __se_sys_futex+0x28f/0x3b0
[ 3130.454321]  ? __se_sys_futex+0x298/0x3b0
[ 3130.458477]  ? do_futex+0x1880/0x1880
[ 3130.462296]  __x64_sys_move_pages+0xdd/0x1b0
[ 3130.466714]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3130.471315]  do_syscall_64+0xf9/0x620
[ 3130.475131]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3130.480325] RIP: 0033:0x7f6a683bfe99
[ 3130.484036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3130.502932] RSP: 002b:00007f6a66d14168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3130.510642] RAX: ffffffffffffffda RBX: 00007f6a684d3030 RCX: 00007f6a683bfe99
[ 3130.517915] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3130.525185] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3130.532457] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3130.539730] R13: 00007ffd6f95cb3f R14: 00007f6a66d14300 R15: 0000000000022000
[ 3130.547983] CPU: 1 PID: 28640 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3130.555875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3130.564816] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3130.565308] Call Trace:
[ 3130.565330]  dump_stack+0x1fc/0x2ef
[ 3130.565348]  warn_alloc.cold+0x7b/0x18f
[ 3130.580594]  ? zone_watermark_ok_safe+0x260/0x260
[ 3130.585448]  ? try_to_free_pages+0x2d7/0x7c0
[ 3130.589875]  ? wait_for_completion_io+0x10/0x10
[ 3130.594561]  __alloc_pages_nodemask+0x232f/0x2890
[ 3130.599416]  ? debug_check_no_obj_freed+0x201/0x490
[ 3130.604538]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3130.609400]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3130.614630]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3130.619255]  alloc_new_node_page+0x2b6/0x400
[ 3130.623675]  migrate_pages+0x528/0x2fe0
[ 3130.627656]  ? mpol_set_nodemask+0x450/0x450
[ 3130.632074]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3130.637614]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3130.642994]  kernel_move_pages+0xde2/0x1820
[ 3130.647330]  ? migrate_pages+0x2fe0/0x2fe0
[ 3130.651572]  ? __se_sys_futex+0x28f/0x3b0
[ 3130.655722]  ? __se_sys_futex+0x298/0x3b0
[ 3130.659882]  ? do_futex+0x1880/0x1880
[ 3130.663694]  __x64_sys_move_pages+0xdd/0x1b0
[ 3130.668109]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3130.672699]  do_syscall_64+0xf9/0x620
[ 3130.676518]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3130.681718] RIP: 0033:0x7f1e38c8fe99
[ 3130.685436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3130.704337] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3130.712056] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3130.719333] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3130.726607] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3130.733881] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3130.741157] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3130.749701] CPU: 0 PID: 28643 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3130.757605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3130.765490] Mem-Info:
[ 3130.766966] Call Trace:
[ 3130.766989]  dump_stack+0x1fc/0x2ef
[ 3130.767009]  warn_alloc.cold+0x7b/0x18f
[ 3130.767029]  ? zone_watermark_ok_safe+0x260/0x260
[ 3130.769741] active_anon:246538 inactive_anon:67444 isolated_anon:1436
[ 3130.769741]  active_file:4254 inactive_file:85206 isolated_file:0
[ 3130.769741]  unevictable:0 dirty:189 writeback:0 unstable:0
[ 3130.769741]  slab_reclaimable:136742 slab_unreclaimable:316540
[ 3130.769741]  mapped:76012 shmem:71879 pagetables:22526 bounce:0
[ 3130.769741]  free:461360 free_pcp:890 free_cma:0
[ 3130.772007]  ? try_to_free_pages+0x2d7/0x7c0
[ 3130.772035]  ? wait_for_completion_io+0x10/0x10
[ 3130.772060]  __alloc_pages_nodemask+0x232f/0x2890
[ 3130.781068] Node 0 active_anon:825844kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3130.784582]  ? debug_check_no_obj_freed+0x201/0x490
[ 3130.784611]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3130.784626]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3130.784642]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3130.784680]  alloc_new_node_page+0x2b6/0x400
[ 3130.784694]  migrate_pages+0x528/0x2fe0
[ 3130.784713]  ? mpol_set_nodemask+0x450/0x450
[ 3130.784737]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3130.784752]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3130.784768]  ? __might_fault+0xef/0x1d0
[ 3130.784783]  ? __might_fault+0x158/0x1d0
[ 3130.784802]  kernel_move_pages+0xde2/0x1820
[ 3130.784826]  ? migrate_pages+0x2fe0/0x2fe0
[ 3130.784842]  ? __se_sys_futex+0x28f/0x3b0
[ 3130.784855]  ? __se_sys_futex+0x298/0x3b0
[ 3130.784875]  ? do_futex+0x1880/0x1880
[ 3130.784897]  __x64_sys_move_pages+0xdd/0x1b0
[ 3130.784914]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3130.784929]  do_syscall_64+0xf9/0x620
[ 3130.784948]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3130.784961] RIP: 0033:0x7f12f54cce99
[ 3130.784975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3130.784983] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3130.784997] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3130.785006] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3130.785015] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3130.785022] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3130.785031] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3130.794216] CPU: 0 PID: 28653 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3130.853081] Node 1 active_anon:160208kB inactive_anon:100268kB active_file:17012kB inactive_file:340820kB unevictable:0kB isolated(anon):5444kB isolated(file):0kB mapped:92356kB dirty:756kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3130.861858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3130.861863] Call Trace:
[ 3130.861883]  dump_stack+0x1fc/0x2ef
[ 3130.861901]  warn_alloc.cold+0x7b/0x18f
[ 3130.861920]  ? zone_watermark_ok_safe+0x260/0x260
[ 3130.861934]  ? try_to_free_pages+0x2d7/0x7c0
[ 3130.861959]  ? wait_for_completion_io+0x10/0x10
[ 3130.870944] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3130.871801]  __alloc_pages_nodemask+0x232f/0x2890
[ 3130.878361] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3130.881459]  ? debug_check_no_obj_freed+0x201/0x490
[ 3130.881488]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3130.891696] Node 0 DMA32 free:38036kB min:35996kB low:44992kB high:53988kB active_anon:823972kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1664kB local_pcp:1332kB free_cma:0kB
[ 3130.894237]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3130.894256]  ? rcu_nmi_exit+0xb3/0x180
[ 3130.894280]  ? PageHuge+0xc/0x160
[ 3130.894298]  alloc_new_node_page+0x2b6/0x400
[ 3130.894314]  migrate_pages+0x528/0x2fe0
[ 3130.903147] lowmem_reserve[]: 0 0 1 1 1
[ 3130.905184]  ? mpol_set_nodemask+0x450/0x450
[ 3130.905209]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3130.905224]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3130.905250]  kernel_move_pages+0xde2/0x1820
[ 3130.911785] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3130.913263]  ? migrate_pages+0x2fe0/0x2fe0
[ 3130.913283]  ? __se_sys_futex+0x28f/0x3b0
[ 3130.919403] lowmem_reserve[]: 0 0 0 0 0
[ 3130.921804]  ? __se_sys_futex+0x298/0x3b0
[ 3130.921823]  ? do_futex+0x1880/0x1880
[ 3130.921845]  __x64_sys_move_pages+0xdd/0x1b0
[ 3130.928413] Node 1 Normal free:1797836kB min:53876kB low:67344kB high:80812kB active_anon:160208kB inactive_anon:100268kB active_file:17012kB inactive_file:340820kB unevictable:0kB writepending:756kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46432kB pagetables:77412kB bounce:0kB free_pcp:2876kB local_pcp:1408kB free_cma:0kB
[ 3130.930108]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3130.930122]  do_syscall_64+0xf9/0x620
[ 3130.930141]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3131.303073] RIP: 0033:0x7f992dec9e99
[ 3131.306785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3131.326021] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3131.333717] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3131.340975] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3131.348237] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3131.355495] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3131.362779] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
15:31:46 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbca"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3131.390822] lowmem_reserve[]: 0 0 0 0 0
[ 3131.395568] Node 0 DMA: 5*4kB (ME) 25*8kB (UMH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3131.416178] Node 0 DMA32: 2061*4kB (UME) 1858*8kB (UME) 662*16kB (UME) 134*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38052kB
15:31:46 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000030000000800010000000000"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r0=>0x0})
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6e6b}, 0x0, 0x0, 0xe5, 0x5, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x40ab00, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="050064002c00"])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3131.431300] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3131.451164] Node 1 Normal: 4292*4kB (UME) 2393*8kB (UME) 2012*16kB (UME) 2460*32kB (UME) 1183*64kB (UME) 1652*128kB (M) 1194*256kB (M) 792*512kB (UME) 403*1024kB (UME) 3*2048kB (ME) 57*4096kB (M) = 1797848kB
[ 3131.597204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3131.664205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
15:31:46 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3131.750762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3131.856209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3131.966418] 82502 total pagecache pages
15:31:47 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3132.033698] 0 pages in swap cache
[ 3132.042574] warn_alloc_show_mem: 2 callbacks suppressed
[ 3132.042580] Mem-Info:
[ 3132.060286] active_anon:245753 inactive_anon:67444 isolated_anon:1717
[ 3132.060286]  active_file:4255 inactive_file:85209 isolated_file:0
[ 3132.060286]  unevictable:0 dirty:199 writeback:0 unstable:0
[ 3132.060286]  slab_reclaimable:136742 slab_unreclaimable:316405
[ 3132.060286]  mapped:76038 shmem:71879 pagetables:22518 bounce:0
[ 3132.060286]  free:461505 free_pcp:1328 free_cma:0
[ 3132.087209] Swap cache stats: add 0, delete 0, find 0/0
[ 3132.100961] Free swap  = 0kB
[ 3132.104544] Total swap = 0kB
[ 3132.107899] 2097051 pages RAM
[ 3132.111321] 0 pages HighMem/MovableOnly
[ 3132.116786] 369649 pages reserved
[ 3132.120551] 0 pages cma reserved
15:31:47 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3132.138225] Node 0 active_anon:822692kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3132.352435] Node 1 active_anon:162580kB inactive_anon:100268kB active_file:17016kB inactive_file:340832kB unevictable:0kB isolated(anon):6452kB isolated(file):0kB mapped:92960kB dirty:796kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3132.404958] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:72kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3132.442123] lowmem_reserve[]: 0 2693 2695 2695 2695
15:31:47 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000030000000800010000000000"], 0x1c}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r0=>0x0})
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6e6b}, 0x0, 0x0, 0xe5, 0x5, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080)) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x40ab00, 0x0) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="050064002c00"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3132.448967] Node 0 DMA32 free:38020kB min:35996kB low:44992kB high:53988kB active_anon:823380kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:2188kB local_pcp:1424kB free_cma:0kB
15:31:47 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbca"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:47 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3132.847303] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3132.873659] lowmem_reserve[]: 0 0 1 1 1
[ 3132.920958] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3133.139278] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3133.157423] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3133.190835] lowmem_reserve[]: 0 0 0 0 0
[ 3133.226366] Node 1 Normal free:1795960kB min:53876kB low:67344kB high:80812kB active_anon:160736kB inactive_anon:100268kB active_file:17024kB inactive_file:340880kB unevictable:0kB writepending:836kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46592kB pagetables:77576kB bounce:0kB free_pcp:2392kB local_pcp:1484kB free_cma:0kB
[ 3133.227296] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3133.294545] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 3133.330552] CPU: 1 PID: 28700 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3133.338904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3133.348259] Call Trace:
[ 3133.350855]  dump_stack+0x1fc/0x2ef
[ 3133.354496]  warn_alloc.cold+0x7b/0x18f
[ 3133.358480]  ? zone_watermark_ok_safe+0x260/0x260
[ 3133.363331]  ? try_to_free_pages+0x2d7/0x7c0
[ 3133.367759]  ? wait_for_completion_io+0x10/0x10
[ 3133.372450]  __alloc_pages_nodemask+0x232f/0x2890
[ 3133.377309]  ? debug_check_no_obj_freed+0x201/0x490
[ 3133.382345]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3133.387195]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3133.392308]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3133.396928]  alloc_new_node_page+0x2b6/0x400
[ 3133.401346]  migrate_pages+0x528/0x2fe0
[ 3133.405331]  ? mpol_set_nodemask+0x450/0x450
[ 3133.409753]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3133.415295]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3133.417525] lowmem_reserve[]: 0 0 0 0 0
[ 3133.420672]  kernel_move_pages+0xde2/0x1820
[ 3133.420697]  ? migrate_pages+0x2fe0/0x2fe0
[ 3133.420714]  ? __se_sys_futex+0x28f/0x3b0
[ 3133.437350]  ? __se_sys_futex+0x298/0x3b0
[ 3133.441512]  ? do_futex+0x1880/0x1880
[ 3133.445323]  __x64_sys_move_pages+0xdd/0x1b0
[ 3133.449748]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3133.454429]  do_syscall_64+0xf9/0x620
[ 3133.458242]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3133.463438] RIP: 0033:0x7fe0a8319e99
[ 3133.467159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3133.470908] Node 0 DMA: 5*4kB (ME) 25*8kB (UMH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3133.486057] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3133.486072] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3133.486080] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3133.486089] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3133.486098] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3133.486105] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
[ 3133.546627] Node 0 DMA32: 1835*4kB (UME) 1948*8kB (UME) 657*16kB (UME) 132*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37660kB
[ 3133.561461] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3133.574330] CPU: 0 PID: 28702 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3133.582238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3133.591594] Call Trace:
[ 3133.594634]  dump_stack+0x1fc/0x2ef
[ 3133.598271]  warn_alloc.cold+0x7b/0x18f
[ 3133.602258]  ? zone_watermark_ok_safe+0x260/0x260
[ 3133.607107]  ? try_to_free_pages+0x2d7/0x7c0
[ 3133.611538]  ? wait_for_completion_io+0x10/0x10
[ 3133.616228]  __alloc_pages_nodemask+0x232f/0x2890
[ 3133.621086]  ? debug_check_no_obj_freed+0x201/0x490
[ 3133.626120]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3133.630973]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3133.636088]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3133.640699]  alloc_new_node_page+0x2b6/0x400
[ 3133.645119]  migrate_pages+0x528/0x2fe0
[ 3133.649103]  ? mpol_set_nodemask+0x450/0x450
[ 3133.653529]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3133.659074]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3133.664455]  kernel_move_pages+0xde2/0x1820
[ 3133.668794]  ? migrate_pages+0x2fe0/0x2fe0
[ 3133.673031]  ? __se_sys_futex+0x28f/0x3b0
[ 3133.677183]  ? __se_sys_futex+0x298/0x3b0
[ 3133.681340]  ? do_futex+0x1880/0x1880
[ 3133.685174]  __x64_sys_move_pages+0xdd/0x1b0
[ 3133.689629]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3133.694219]  do_syscall_64+0xf9/0x620
[ 3133.698036]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3133.703230] RIP: 0033:0x7f6a683bfe99
[ 3133.706949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3133.726216] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3133.733935] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3133.741210] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3133.748587] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3133.755860] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3133.763173] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3133.786037] Node 1 Normal: 4263*4kB (UME) 2343*8kB (ME) 1896*16kB (UME) 2466*32kB (UME) 1179*64kB (UME) 1657*128kB (M) 1194*256kB (M) 800*512kB (UME) 410*1024kB (UME) 1*2048kB (E) 55*4096kB (M) = 1795028kB
[ 3133.852825] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3133.856262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3133.871378] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3133.879063] CPU: 1 PID: 28722 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3133.883457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3133.886943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3133.886948] Call Trace:
[ 3133.886967]  dump_stack+0x1fc/0x2ef
[ 3133.886986]  warn_alloc.cold+0x7b/0x18f
[ 3133.887005]  ? zone_watermark_ok_safe+0x260/0x260
[ 3133.887020]  ? try_to_free_pages+0x2d7/0x7c0
[ 3133.887046]  ? wait_for_completion_io+0x10/0x10
[ 3133.887069]  __alloc_pages_nodemask+0x232f/0x2890
[ 3133.887090]  ? debug_check_no_obj_freed+0x201/0x490
[ 3133.887116]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3133.887128]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3133.887146]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3133.903282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3133.905164]  alloc_new_node_page+0x2b6/0x400
[ 3133.905181]  migrate_pages+0x528/0x2fe0
[ 3133.905202]  ? mpol_set_nodemask+0x450/0x450
[ 3133.905225]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3133.905239]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3133.905267]  kernel_move_pages+0xde2/0x1820
[ 3133.910870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3133.911993]  ? migrate_pages+0x2fe0/0x2fe0
[ 3133.912009]  ? __se_sys_futex+0x28f/0x3b0
[ 3133.912023]  ? __se_sys_futex+0x298/0x3b0
[ 3133.918024] 82510 total pagecache pages
[ 3133.920818]  ? do_futex+0x1880/0x1880
[ 3133.920842]  __x64_sys_move_pages+0xdd/0x1b0
[ 3133.920863]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3133.927286] 0 pages in swap cache
[ 3133.929924]  do_syscall_64+0xf9/0x620
[ 3133.929946]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3133.929966] RIP: 0033:0x7f12f54cce99
[ 3133.936958] Swap cache stats: add 0, delete 0, find 0/0
[ 3133.939923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3133.939932] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3133.939946] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3133.939955] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3133.939963] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3133.939976] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3133.950093] Free swap  = 0kB
[ 3133.954461] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3133.964329] Mem-Info:
[ 3134.007625] Total swap = 0kB
[ 3134.020704] active_anon:246306 inactive_anon:67444 isolated_anon:691
[ 3134.020704]  active_file:4258 inactive_file:85228 isolated_file:0
[ 3134.020704]  unevictable:0 dirty:218 writeback:0 unstable:0
[ 3134.020704]  slab_reclaimable:136738 slab_unreclaimable:317009
[ 3134.020704]  mapped:76031 shmem:71879 pagetables:22532 bounce:0
[ 3134.020704]  free:461406 free_pcp:1405 free_cma:0
[ 3134.027816] 2097051 pages RAM
[ 3134.041039] Node 0 active_anon:824872kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3134.046331] 0 pages HighMem/MovableOnly
15:31:49 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:49 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async, rerun: 64)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000030000000800010000000000"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r0=>0x0}) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6e6b}, 0x0, 0x0, 0xe5, 0x5, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x40ab00, 0x0) (async, rerun: 32)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="050064002c00"]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:49 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:49 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:49 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3134.053698] Node 1 active_anon:160352kB inactive_anon:100268kB active_file:17028kB inactive_file:340908kB unevictable:0kB isolated(anon):2764kB isolated(file):0kB mapped:92932kB dirty:872kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3134.079095] 369649 pages reserved
[ 3134.099790] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:92kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3134.149566] 0 pages cma reserved
[ 3134.160612] lowmem_reserve[]: 0 2693 2695 2695 2695
15:31:49 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1f4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x134, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x555de7d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56a727}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x80000000}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x408555e8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e4d745c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21f40dac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ac75a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3089ed6b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5545cbef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c5947a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x371f9855}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfd59}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9e81cf6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x284075b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b147797}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e40c99e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb96f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ab231af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x702f21a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd84f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f55537d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65750533}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1da0ac70}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20040081}, 0x805)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:50 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3135.135150] Node 0 DMA32 free:39916kB min:35996kB low:44992kB high:53988kB active_anon:822856kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:2744kB local_pcp:1360kB free_cma:0kB
[ 3135.172999] lowmem_reserve[]: 0 0 1 1 1
[ 3135.187591] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3135.342043] lowmem_reserve[]: 0 0 0 0 0
[ 3135.353005] Node 1 Normal free:1797340kB min:53876kB low:67344kB high:80812kB active_anon:160652kB inactive_anon:100268kB active_file:17032kB inactive_file:340928kB unevictable:0kB writepending:896kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46592kB pagetables:77684kB bounce:0kB free_pcp:2612kB local_pcp:1344kB free_cma:0kB
[ 3135.481439] lowmem_reserve[]: 0 0 0 0 0
[ 3135.501470] Node 0 DMA: 4*4kB (E) 24*8kB (UH) 9*16kB (UMH) 1*32kB (H) 0*64kB 3*128kB (UM) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11008kB
[ 3135.562625] Node 0 DMA32: 2164*4kB (UME) 1800*8kB (UME) 699*16kB (UME) 160*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39360kB
[ 3135.646569] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3135.679172] Node 1 Normal: 4218*4kB (UME) 2515*8kB (UME) 1929*16kB (UME) 2481*32kB (UME) 1188*64kB (UME) 1669*128kB (M) 1205*256kB (M) 803*512kB (UME) 412*1024kB (UME) 2*2048kB (ME) 53*4096kB (M) = 1799600kB
[ 3135.727387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3135.740238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3135.753258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3135.769854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3135.779607] 82524 total pagecache pages
[ 3135.790324] 0 pages in swap cache
[ 3135.794804] Swap cache stats: add 0, delete 0, find 0/0
[ 3135.800286] Free swap  = 0kB
[ 3135.803388] Total swap = 0kB
[ 3135.817300] 2097051 pages RAM
[ 3135.820521] 0 pages HighMem/MovableOnly
15:31:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:50 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:50 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa0300907800"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:50 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:50 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1f4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x134, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x555de7d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56a727}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x80000000}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x408555e8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e4d745c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21f40dac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ac75a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3089ed6b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5545cbef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c5947a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x371f9855}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfd59}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9e81cf6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x284075b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b147797}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e40c99e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb96f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ab231af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x702f21a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd84f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f55537d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65750533}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1da0ac70}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20040081}, 0x805) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3135.828892] 369649 pages reserved
[ 3135.832454] 0 pages cma reserved
15:31:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:51 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:52 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1f4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x134, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x555de7d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56a727}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x80000000}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x408555e8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e4d745c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21f40dac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ac75a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3089ed6b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5545cbef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c5947a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x371f9855}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfd59}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9e81cf6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x284075b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b147797}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e40c99e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb96f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ab231af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x702f21a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd84f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f55537d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65750533}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1da0ac70}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20040081}, 0x805)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) (async)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1f4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x134, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x555de7d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56a727}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x80000000}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x408555e8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e4d745c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21f40dac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ac75a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3089ed6b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5545cbef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c5947a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x371f9855}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfd59}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9e81cf6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x284075b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b147797}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e40c99e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb96f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ab231af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x702f21a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd84f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f55537d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65750533}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1da0ac70}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20040081}, 0x805) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

[ 3136.905434] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3136.920430] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3136.938120] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3136.945417] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3136.960356] CPU: 1 PID: 28785 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3136.962523] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3136.968266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3136.968273] Call Trace:
[ 3136.968296]  dump_stack+0x1fc/0x2ef
[ 3136.968316]  warn_alloc.cold+0x7b/0x18f
[ 3136.968333]  ? zone_watermark_ok_safe+0x260/0x260
[ 3136.968346]  ? try_to_free_pages+0x2d7/0x7c0
[ 3136.968369]  ? wait_for_completion_io+0x10/0x10
[ 3136.968393]  __alloc_pages_nodemask+0x232f/0x2890
[ 3136.968414]  ? debug_check_no_obj_freed+0x201/0x490
[ 3137.023445]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3137.028301]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3137.033421]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3137.038038]  alloc_new_node_page+0x2b6/0x400
[ 3137.042461]  migrate_pages+0x528/0x2fe0
[ 3137.046451]  ? mpol_set_nodemask+0x450/0x450
[ 3137.050886]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3137.056436]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3137.061825]  kernel_move_pages+0xde2/0x1820
[ 3137.066176]  ? migrate_pages+0x2fe0/0x2fe0
[ 3137.070428]  ? __se_sys_futex+0x28f/0x3b0
[ 3137.074586]  ? __se_sys_futex+0x298/0x3b0
[ 3137.078746]  ? do_futex+0x1880/0x1880
[ 3137.082562]  __x64_sys_move_pages+0xdd/0x1b0
[ 3137.086983]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3137.090015] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3137.091567]  do_syscall_64+0xf9/0x620
[ 3137.091590]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3137.091602] RIP: 0033:0x7f12f54cce99
[ 3137.091617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3137.128266] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3137.135986] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3137.143265] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3137.150541] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3137.157815] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3137.165089] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3137.195835] CPU: 1 PID: 28783 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3137.203748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3137.213104] Call Trace:
[ 3137.215706]  dump_stack+0x1fc/0x2ef
[ 3137.219353]  warn_alloc.cold+0x7b/0x18f
[ 3137.223377]  ? zone_watermark_ok_safe+0x260/0x260
[ 3137.226438] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3137.228223]  ? try_to_free_pages+0x2d7/0x7c0
[ 3137.228251]  ? wait_for_completion_io+0x10/0x10
[ 3137.228275]  __alloc_pages_nodemask+0x232f/0x2890
[ 3137.254083]  ? debug_check_no_obj_freed+0x201/0x490
[ 3137.259123]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3137.263977]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3137.269096]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3137.273716]  alloc_new_node_page+0x2b6/0x400
[ 3137.278132]  migrate_pages+0x528/0x2fe0
[ 3137.282125]  ? mpol_set_nodemask+0x450/0x450
[ 3137.286557]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3137.292104]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3137.297841]  kernel_move_pages+0xde2/0x1820
[ 3137.302189]  ? migrate_pages+0x2fe0/0x2fe0
[ 3137.306451]  __x64_sys_move_pages+0xdd/0x1b0
[ 3137.308477] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3137.310868]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3137.310886]  do_syscall_64+0xf9/0x620
[ 3137.310905]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3137.310918] RIP: 0033:0x7f992dec9e99
[ 3137.333227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3137.352310] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
15:31:52 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3137.360027] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3137.367304] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3137.374600] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3137.381878] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3137.389153] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3137.403219] CPU: 0 PID: 28804 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3137.411127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3137.419256] warn_alloc_show_mem: 2 callbacks suppressed
[ 3137.419260] Mem-Info:
[ 3137.420481] Call Trace:
[ 3137.420502]  dump_stack+0x1fc/0x2ef
[ 3137.420523]  warn_alloc.cold+0x7b/0x18f
[ 3137.425994] active_anon:246792 inactive_anon:67444 isolated_anon:822
[ 3137.425994]  active_file:4260 inactive_file:85236 isolated_file:0
[ 3137.425994]  unevictable:0 dirty:230 writeback:0 unstable:0
[ 3137.425994]  slab_reclaimable:136745 slab_unreclaimable:317076
[ 3137.425994]  mapped:76159 shmem:71879 pagetables:22625 bounce:0
[ 3137.425994]  free:460890 free_pcp:881 free_cma:0
[ 3137.428276]  ? zone_watermark_ok_safe+0x260/0x260
[ 3137.428289]  ? try_to_free_pages+0x2d7/0x7c0
[ 3137.428315]  ? wait_for_completion_io+0x10/0x10
[ 3137.430941] Node 0 active_anon:826224kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3137.434495]  __alloc_pages_nodemask+0x232f/0x2890
[ 3137.434519]  ? debug_check_no_obj_freed+0x201/0x490
[ 3137.434544]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3137.438559] Node 1 active_anon:160944kB inactive_anon:100268kB active_file:17036kB inactive_file:340940kB unevictable:0kB isolated(anon):3288kB isolated(file):0kB mapped:92944kB dirty:920kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3137.472938]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3137.472958]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3137.472996]  alloc_new_node_page+0x2b6/0x400
[ 3137.473012]  migrate_pages+0x528/0x2fe0
[ 3137.473028]  ? mpol_set_nodemask+0x450/0x450
[ 3137.473050]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3137.473067]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3137.473089]  kernel_move_pages+0xde2/0x1820
[ 3137.473116]  ? migrate_pages+0x2fe0/0x2fe0
[ 3137.473136]  ? do_futex+0x1880/0x1880
[ 3137.473157]  __x64_sys_move_pages+0xdd/0x1b0
[ 3137.473174]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3137.473190]  do_syscall_64+0xf9/0x620
[ 3137.473210]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3137.473223] RIP: 0033:0x7f6a683bfe99
[ 3137.473237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3137.473244] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3137.473258] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3137.473266] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3137.473275] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3137.473282] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3137.473291] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3137.477534] CPU: 0 PID: 28782 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3137.485996] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3137.487746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3137.487751] Call Trace:
[ 3137.487771]  dump_stack+0x1fc/0x2ef
[ 3137.487790]  warn_alloc.cold+0x7b/0x18f
[ 3137.517228] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3137.520453]  ? zone_watermark_ok_safe+0x260/0x260
[ 3137.520467]  ? try_to_free_pages+0x2d7/0x7c0
[ 3137.520491]  ? wait_for_completion_io+0x10/0x10
[ 3137.525743] Node 0 DMA32 free:35788kB min:35996kB low:44992kB high:53988kB active_anon:826112kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:976kB local_pcp:492kB free_cma:0kB
[ 3137.530503]  __alloc_pages_nodemask+0x232f/0x2890
[ 3137.530528]  ? debug_check_no_obj_freed+0x201/0x490
[ 3137.560444] lowmem_reserve[]: 0 0 1 1 1
[ 3137.564057]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3137.564072]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3137.564090]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3137.564126]  alloc_new_node_page+0x2b6/0x400
[ 3137.568733] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3137.573067]  migrate_pages+0x528/0x2fe0
[ 3137.573086]  ? mpol_set_nodemask+0x450/0x450
15:31:53 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3137.573110]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3137.577130] lowmem_reserve[]: 0 0 0 0 0
[ 3137.581453]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3137.581481]  kernel_move_pages+0xde2/0x1820
[ 3137.587076] Node 1 Normal free:1796792kB min:53876kB low:67344kB high:80812kB active_anon:160944kB inactive_anon:100268kB active_file:17036kB inactive_file:340940kB unevictable:0kB writepending:920kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46624kB pagetables:77808kB bounce:0kB free_pcp:2536kB local_pcp:1272kB free_cma:0kB
[ 3137.592356]  ? migrate_pages+0x2fe0/0x2fe0
[ 3137.592377]  ? retint_kernel+0x2d/0x2d
[ 3137.596748] lowmem_reserve[]: 0 0 0 0 0
[ 3137.600904]  __x64_sys_move_pages+0xdd/0x1b0
[ 3137.600917]  ? do_syscall_64+0x56/0x620
[ 3137.600933]  do_syscall_64+0xf9/0x620
[ 3137.604783] Node 0 DMA: 5*4kB (ME) 25*8kB (UMH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3137.609112]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3137.609124] RIP: 0033:0x7f1e38c8fe99
15:31:53 executing program 5:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1f4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x134, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x555de7d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56a727}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x80000000}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x408555e8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e4d745c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21f40dac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ac75a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3089ed6b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5545cbef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c5947a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x371f9855}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfd59}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9e81cf6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x284075b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b147797}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e40c99e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb96f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ab231af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x702f21a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd84f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f55537d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65750533}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1da0ac70}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20040081}, 0x805)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3137.609139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3137.613777] Node 0 DMA32: 1835*4kB (UME) 1766*8kB (UM) 629*16kB (UM) 134*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35820kB
[ 3137.617480] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3137.617495] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3137.617503] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3137.617516] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3137.622732] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3137.626383] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3137.626391] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3138.065819] Node 1 Normal: 4273*4kB (UME) 2455*8kB (UME) 1821*16kB (UME) 2470*32kB (UME) 1196*64kB (UME) 1671*128kB (M) 1203*256kB (M) 810*512kB (UME) 413*1024kB (UME) 4*2048kB (ME) 51*4096kB (M) = 1798028kB
[ 3138.091984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3138.108418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3138.135139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3138.156993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3138.189829] 82541 total pagecache pages
[ 3138.204355] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 3138.218593] 0 pages in swap cache
[ 3138.222140] romfs: VFS: Can't find a romfs filesystem on dev loop5.
[ 3138.262087] Swap cache stats: add 0, delete 0, find 0/0
[ 3138.280416] Free swap  = 0kB
[ 3138.283459] Total swap = 0kB
[ 3138.300741] 2097051 pages RAM
[ 3138.327181] 0 pages HighMem/MovableOnly
[ 3138.341315] 369649 pages reserved
[ 3138.350559] 0 pages cma reserved
15:31:53 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:53 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbca"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:53 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
clone(0x40000, &(0x7f00000001c0)="0337f0abed07fb52dbae2c420c6e51648bb0c7f3c4e0e362168af33588409e3323aba42ab53a57f36aa8afbbb071b34c84e47eb83776e3ed749c8875d31a3fe1fe4a9023cedb73ef3d8dce4dfa87bbd3e35965c30d0ad49bb5b3185ac0195c7613e79a8a192f52e80613766aaaf7404aafcca13c", &(0x7f0000000000), &(0x7f0000000240), &(0x7f00000004c0)="acded7c6b6ddc410ea2e4c2d650760e06cccaa7b49db149ab001f90ef4f5db31516830f6e5f949c340faf81a63230a69c918ac56ffb09ac5f38030bd10857248ab41852686b10f8e50a8eb4f17d9e8485a1b0009024609496c649f80ad0ae108c093b90698b46e6ccc3a28813d1b9d7b67d692dcb92a989ec1c93f03422e2db37bd1b0274dbb510bc6439a29675788004375b810d62c12c20b9a44316ac750297b0212e7d2f12e87db353c29fbf2d21736245d1e50cc8deb92e43bd75c97e034758146821435f46680c040e0d0a56b22")
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:53 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:53 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:54 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:54 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:54 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:54 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
clone(0x40000, &(0x7f00000001c0)="0337f0abed07fb52dbae2c420c6e51648bb0c7f3c4e0e362168af33588409e3323aba42ab53a57f36aa8afbbb071b34c84e47eb83776e3ed749c8875d31a3fe1fe4a9023cedb73ef3d8dce4dfa87bbd3e35965c30d0ad49bb5b3185ac0195c7613e79a8a192f52e80613766aaaf7404aafcca13c", &(0x7f0000000000), &(0x7f0000000240), &(0x7f00000004c0)="acded7c6b6ddc410ea2e4c2d650760e06cccaa7b49db149ab001f90ef4f5db31516830f6e5f949c340faf81a63230a69c918ac56ffb09ac5f38030bd10857248ab41852686b10f8e50a8eb4f17d9e8485a1b0009024609496c649f80ad0ae108c093b90698b46e6ccc3a28813d1b9d7b67d692dcb92a989ec1c93f03422e2db37bd1b0274dbb510bc6439a29675788004375b810d62c12c20b9a44316ac750297b0212e7d2f12e87db353c29fbf2d21736245d1e50cc8deb92e43bd75c97e034758146821435f46680c040e0d0a56b22") (async)
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:54 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:54 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3139.829334] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3139.841231] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3139.847739] CPU: 1 PID: 28895 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3139.855645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3139.865004] Call Trace:
[ 3139.867612]  dump_stack+0x1fc/0x2ef
[ 3139.871259]  warn_alloc.cold+0x7b/0x18f
[ 3139.875351]  ? zone_watermark_ok_safe+0x260/0x260
[ 3139.880212]  ? try_to_free_pages+0x2d7/0x7c0
[ 3139.884644]  ? wait_for_completion_io+0x10/0x10
[ 3139.889341]  __alloc_pages_nodemask+0x232f/0x2890
[ 3139.894208]  ? debug_check_no_obj_freed+0x201/0x490
[ 3139.899248]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3139.904106]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3139.909327]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3139.913948]  alloc_new_node_page+0x2b6/0x400
[ 3139.918364]  migrate_pages+0x528/0x2fe0
[ 3139.922350]  ? mpol_set_nodemask+0x450/0x450
[ 3139.926781]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3139.932326]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3139.937731]  kernel_move_pages+0xde2/0x1820
[ 3139.942074]  ? migrate_pages+0x2fe0/0x2fe0
[ 3139.946318]  ? __se_sys_futex+0x28f/0x3b0
[ 3139.950472]  ? __se_sys_futex+0x298/0x3b0
[ 3139.954636]  ? do_futex+0x1880/0x1880
[ 3139.958465]  __x64_sys_move_pages+0xdd/0x1b0
[ 3139.962886]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3139.967485]  do_syscall_64+0xf9/0x620
[ 3139.971302]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3139.976498] RIP: 0033:0x7f6a683bfe99
[ 3139.980220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3139.982032] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3139.999124] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3139.999137] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3139.999144] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3139.999152] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3139.999160] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3139.999168] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3140.046463] warn_alloc_show_mem: 3 callbacks suppressed
[ 3140.046468] Mem-Info:
[ 3140.055524] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3140.070195] CPU: 0 PID: 28891 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3140.078094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3140.087450] Call Trace:
[ 3140.090047]  dump_stack+0x1fc/0x2ef
[ 3140.093686]  warn_alloc.cold+0x7b/0x18f
[ 3140.097674]  ? zone_watermark_ok_safe+0x260/0x260
[ 3140.102522]  ? try_to_free_pages+0x2d7/0x7c0
[ 3140.106950]  ? wait_for_completion_io+0x10/0x10
[ 3140.111642]  __alloc_pages_nodemask+0x232f/0x2890
[ 3140.116507]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3140.121352]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3140.126119]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3140.130905]  alloc_new_node_page+0x2b6/0x400
[ 3140.135335]  migrate_pages+0x528/0x2fe0
[ 3140.139320]  ? mpol_set_nodemask+0x450/0x450
[ 3140.143739]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3140.149278]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3140.154664]  kernel_move_pages+0xde2/0x1820
[ 3140.159004]  ? migrate_pages+0x2fe0/0x2fe0
[ 3140.163250]  ? __se_sys_futex+0x28f/0x3b0
[ 3140.167400]  ? __se_sys_futex+0x298/0x3b0
[ 3140.171558]  ? do_futex+0x1880/0x1880
[ 3140.175368]  __x64_sys_move_pages+0xdd/0x1b0
[ 3140.179784]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3140.184366]  do_syscall_64+0xf9/0x620
[ 3140.188171]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3140.193357] RIP: 0033:0x7f1e38c8fe99
[ 3140.197076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3140.203515] active_anon:246744 inactive_anon:67444 isolated_anon:840
[ 3140.203515]  active_file:4264 inactive_file:85250 isolated_file:0
15:31:55 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3140.203515]  unevictable:0 dirty:69 writeback:0 unstable:0
[ 3140.203515]  slab_reclaimable:136745 slab_unreclaimable:317100
[ 3140.203515]  mapped:76189 shmem:71879 pagetables:22732 bounce:0
[ 3140.203515]  free:460599 free_pcp:1094 free_cma:0
[ 3140.215973] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3140.215988] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3140.215996] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3140.216004] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3140.216010] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3140.216017] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
15:31:55 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:55 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
clone(0x40000, &(0x7f00000001c0)="0337f0abed07fb52dbae2c420c6e51648bb0c7f3c4e0e362168af33588409e3323aba42ab53a57f36aa8afbbb071b34c84e47eb83776e3ed749c8875d31a3fe1fe4a9023cedb73ef3d8dce4dfa87bbd3e35965c30d0ad49bb5b3185ac0195c7613e79a8a192f52e80613766aaaf7404aafcca13c", &(0x7f0000000000), &(0x7f0000000240), &(0x7f00000004c0)="acded7c6b6ddc410ea2e4c2d650760e06cccaa7b49db149ab001f90ef4f5db31516830f6e5f949c340faf81a63230a69c918ac56ffb09ac5f38030bd10857248ab41852686b10f8e50a8eb4f17d9e8485a1b0009024609496c649f80ad0ae108c093b90698b46e6ccc3a28813d1b9d7b67d692dcb92a989ec1c93f03422e2db37bd1b0274dbb510bc6439a29675788004375b810d62c12c20b9a44316ac750297b0212e7d2f12e87db353c29fbf2d21736245d1e50cc8deb92e43bd75c97e034758146821435f46680c040e0d0a56b22")
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
clone(0x40000, &(0x7f00000001c0)="0337f0abed07fb52dbae2c420c6e51648bb0c7f3c4e0e362168af33588409e3323aba42ab53a57f36aa8afbbb071b34c84e47eb83776e3ed749c8875d31a3fe1fe4a9023cedb73ef3d8dce4dfa87bbd3e35965c30d0ad49bb5b3185ac0195c7613e79a8a192f52e80613766aaaf7404aafcca13c", &(0x7f0000000000), &(0x7f0000000240), &(0x7f00000004c0)="acded7c6b6ddc410ea2e4c2d650760e06cccaa7b49db149ab001f90ef4f5db31516830f6e5f949c340faf81a63230a69c918ac56ffb09ac5f38030bd10857248ab41852686b10f8e50a8eb4f17d9e8485a1b0009024609496c649f80ad0ae108c093b90698b46e6ccc3a28813d1b9d7b67d692dcb92a989ec1c93f03422e2db37bd1b0274dbb510bc6439a29675788004375b810d62c12c20b9a44316ac750297b0212e7d2f12e87db353c29fbf2d21736245d1e50cc8deb92e43bd75c97e034758146821435f46680c040e0d0a56b22") (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async)

15:31:55 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:55 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3140.842110] Node 0 active_anon:824476kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3141.043532] Mem-Info:
[ 3141.046005] active_anon:247126 inactive_anon:67444 isolated_anon:1078
[ 3141.046005]  active_file:4266 inactive_file:85255 isolated_file:0
[ 3141.046005]  unevictable:0 dirty:78 writeback:0 unstable:0
[ 3141.046005]  slab_reclaimable:136745 slab_unreclaimable:317306
[ 3141.046005]  mapped:76180 shmem:71879 pagetables:22686 bounce:0
[ 3141.046005]  free:459956 free_pcp:876 free_cma:0
[ 3141.080714] Node 0 active_anon:827228kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3141.109022] Node 1 active_anon:161276kB inactive_anon:100268kB active_file:17060kB inactive_file:341016kB unevictable:0kB isolated(anon):4312kB isolated(file):0kB mapped:93028kB dirty:312kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3141.114707] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3141.151730] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3141.216885] Node 1 active_anon:161276kB inactive_anon:100268kB active_file:17060kB inactive_file:341016kB unevictable:0kB isolated(anon):4312kB isolated(file):0kB mapped:93028kB dirty:312kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3141.218706] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3141.263606] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 3141.270355] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3141.271329] CPU: 0 PID: 28961 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3141.282230] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3141.290032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3141.290038] Call Trace:
[ 3141.290057]  dump_stack+0x1fc/0x2ef
[ 3141.290078]  warn_alloc.cold+0x7b/0x18f
[ 3141.290099]  ? zone_watermark_ok_safe+0x260/0x260
[ 3141.295395] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3141.304520]  ? try_to_free_pages+0x2d7/0x7c0
[ 3141.304547]  ? wait_for_completion_io+0x10/0x10
[ 3141.304572]  __alloc_pages_nodemask+0x232f/0x2890
[ 3141.307227] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3141.310753]  ? debug_check_no_obj_freed+0x201/0x490
[ 3141.323433] Node 0 DMA32 free:35768kB min:35996kB low:44992kB high:53988kB active_anon:827116kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:776kB local_pcp:248kB free_cma:0kB
[ 3141.324532]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3141.328904] lowmem_reserve[]: 0 0 1 1 1
[ 3141.333559]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3141.333578]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3141.333618]  alloc_new_node_page+0x2b6/0x400
[ 3141.333633]  migrate_pages+0x528/0x2fe0
[ 3141.333651]  ? mpol_set_nodemask+0x450/0x450
[ 3141.333675]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3141.333689]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3141.333716]  kernel_move_pages+0xde2/0x1820
[ 3141.333739]  ? migrate_pages+0x2fe0/0x2fe0
[ 3141.333752]  ? __se_sys_futex+0x28f/0x3b0
[ 3141.333765]  ? __se_sys_futex+0x298/0x3b0
[ 3141.333783]  ? do_futex+0x1880/0x1880
[ 3141.333806]  __x64_sys_move_pages+0xdd/0x1b0
[ 3141.333821]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3141.333833]  do_syscall_64+0xf9/0x620
[ 3141.333850]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3141.333862] RIP: 0033:0x7fe0a8319e99
[ 3141.333877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3141.333884] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3141.333897] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3141.333905] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3141.333914] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3141.333921] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3141.333930] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
[ 3141.374182] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3141.411148] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3141.415339] CPU: 0 PID: 28924 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3141.433665] Node 0 DMA32 free:35768kB min:35996kB low:44992kB high:53988kB active_anon:827116kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:776kB local_pcp:248kB free_cma:0kB
[ 3141.437643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3141.442992] lowmem_reserve[]: 0 0 1 1 1
[ 3141.447295] Call Trace:
[ 3141.447321]  dump_stack+0x1fc/0x2ef
[ 3141.447340]  warn_alloc.cold+0x7b/0x18f
[ 3141.447359]  ? zone_watermark_ok_safe+0x260/0x260
[ 3141.463426] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3141.463632]  ? wait_for_completion_io+0x10/0x10
[ 3141.468007] lowmem_reserve[]: 0 0 0 0 0
[ 3141.472590]  __alloc_pages_nodemask+0x232f/0x2890
[ 3141.493411] Node 1 Normal free:1794204kB min:53876kB low:67344kB high:80812kB active_anon:161076kB inactive_anon:100268kB active_file:17060kB inactive_file:341016kB unevictable:0kB writepending:312kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46720kB pagetables:77904kB bounce:0kB free_pcp:2772kB local_pcp:1452kB free_cma:0kB
[ 3141.504123]  ? rcu_nmi_exit+0xb3/0x180
[ 3141.504152]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3141.504171]  ? _raw_spin_unlock_irqrestore+0xa3/0xe0
[ 3141.523414] lowmem_reserve[]: 0 0 0 0 0
[ 3141.526402]  alloc_new_node_page+0x2b6/0x400
[ 3141.553409] Node 0 DMA: 5*4kB (ME) 25*8kB (UMH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3141.558234]  migrate_pages+0x528/0x2fe0
[ 3141.573417] Node 0 DMA32: 1908*4kB (UE) 1567*8kB (M) 679*16kB (UM) 148*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35768kB
[ 3141.595151]  ? mpol_set_nodemask+0x450/0x450
[ 3141.595175]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3141.595191]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3141.595213]  kernel_move_pages+0xde2/0x1820
[ 3141.613416] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3141.614704]  ? migrate_pages+0x2fe0/0x2fe0
[ 3141.618646] lowmem_reserve[]: 0 0 0 0 0
[ 3141.623476]  ? __se_sys_futex+0x28f/0x3b0
[ 3141.623487]  ? __se_sys_futex+0x298/0x3b0
[ 3141.623503]  ? do_futex+0x1880/0x1880
[ 3141.623525]  __x64_sys_move_pages+0xdd/0x1b0
[ 3141.623546]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3141.683411] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3141.693243]  do_syscall_64+0xf9/0x620
[ 3141.713433] Node 1 Normal free:1794620kB min:53876kB low:67344kB high:80812kB active_anon:161076kB inactive_anon:100268kB active_file:17060kB inactive_file:341016kB unevictable:0kB writepending:312kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46720kB pagetables:77904kB bounce:0kB free_pcp:2772kB local_pcp:1452kB free_cma:0kB
[ 3141.715386]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3141.732266] Node 1 Normal: 4371*4kB (UME) 2703*8kB (UME) 1827*16kB (UME) 2482*32kB (UME) 1213*64kB (UME) 1685*128kB (M) 1213*256kB (M) 815*512kB (UME) 419*1024kB (UME) 2*2048kB (ME) 47*4096kB (M) = 1794548kB
[ 3141.734850] RIP: 0033:0x7f12f54cce99
[ 3141.734864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3141.734871] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3141.734884] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3141.734892] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3141.734899] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3141.734906] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3141.734919] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3141.773398] lowmem_reserve[]: 0 0 0 0 0
[ 3141.801218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3141.823447] CPU: 1 PID: 28931 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3141.836174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3141.838124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3141.838130] Call Trace:
[ 3141.838152]  dump_stack+0x1fc/0x2ef
[ 3141.838172]  warn_alloc.cold+0x7b/0x18f
[ 3141.838193]  ? zone_watermark_ok_safe+0x260/0x260
[ 3141.869976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3141.874021]  ? try_to_free_pages+0x2d7/0x7c0
[ 3141.874050]  ? wait_for_completion_io+0x10/0x10
[ 3141.874074]  __alloc_pages_nodemask+0x232f/0x2890
[ 3141.874096]  ? rcu_nmi_exit+0xb3/0x180
[ 3141.874121]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3141.874137]  ? _raw_spin_unlock_irqrestore+0xa3/0xe0
[ 3141.874183]  alloc_new_node_page+0x2b6/0x400
[ 3141.897742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3141.915336]  migrate_pages+0x528/0x2fe0
[ 3141.915358]  ? mpol_set_nodemask+0x450/0x450
[ 3141.915381]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3141.915395]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3141.915418]  kernel_move_pages+0xde2/0x1820
[ 3141.915446]  ? migrate_pages+0x2fe0/0x2fe0
[ 3141.915463]  ? __se_sys_futex+0x28f/0x3b0
[ 3141.923473] 82553 total pagecache pages
[ 3141.930415]  ? __se_sys_futex+0x298/0x3b0
[ 3141.930440]  ? do_futex+0x1880/0x1880
[ 3141.930463]  __x64_sys_move_pages+0xdd/0x1b0
[ 3141.930482]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3141.938061] 0 pages in swap cache
[ 3141.944993]  do_syscall_64+0xf9/0x620
[ 3141.945015]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3141.945028] RIP: 0033:0x7f992dec9e99
[ 3141.945043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3141.945050] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3141.945064] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
15:31:57 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3141.945072] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3141.945080] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3141.945088] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3141.945099] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3141.952614] Swap cache stats: add 0, delete 0, find 0/0
[ 3141.992380] Node 0 DMA: 5*4kB (ME) 25*8kB (UMH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3142.073603] Free swap  = 0kB
[ 3142.076345] Node 0 DMA32: 1911*4kB (UME) 1600*8kB (UM) 679*16kB (UM) 148*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36044kB
[ 3142.080182] Total swap = 0kB
[ 3142.092575] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3142.095375] 2097051 pages RAM
[ 3142.103113] Node 1 Normal: 4369*4kB (UME) 2836*8kB (UME) 1829*16kB (UME) 2484*32kB (UME) 1211*64kB (UME) 1685*128kB (M) 1215*256kB (M) 816*512kB (UME) 419*1024kB (UME) 2*2048kB (ME) 47*4096kB (M) = 1796596kB
[ 3142.106888] 0 pages HighMem/MovableOnly
[ 3142.117065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3142.121740] 369649 pages reserved
[ 3142.122948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3142.122960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3142.122971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3142.122977] 82563 total pagecache pages
[ 3142.122991] 0 pages in swap cache
[ 3142.123003] Swap cache stats: add 0, delete 0, find 0/0
[ 3142.127010] 0 pages cma reserved
[ 3142.140030] Free swap  = 0kB
[ 3142.167127] warn_alloc_show_mem: 1 callbacks suppressed
[ 3142.167131] Mem-Info:
[ 3142.189132] Total swap = 0kB
[ 3142.250509] active_anon:245944 inactive_anon:67444 isolated_anon:688
[ 3142.250509]  active_file:4266 inactive_file:85258 isolated_file:0
[ 3142.250509]  unevictable:0 dirty:88 writeback:0 unstable:0
[ 3142.250509]  slab_reclaimable:136745 slab_unreclaimable:316853
[ 3142.250509]  mapped:76070 shmem:71879 pagetables:22650 bounce:0
[ 3142.250509]  free:461644 free_pcp:1329 free_cma:0
[ 3142.294965] 2097051 pages RAM
[ 3142.379848] Node 0 active_anon:822784kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3142.414695] Node 1 active_anon:160972kB inactive_anon:100268kB active_file:17060kB inactive_file:341028kB unevictable:0kB isolated(anon):4800kB isolated(file):0kB mapped:92588kB dirty:352kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3142.445482] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:72kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3142.473377] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3142.478583] Node 0 DMA32 free:38012kB min:35996kB low:44992kB high:53988kB active_anon:822772kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:2816kB local_pcp:1448kB free_cma:0kB
[ 3142.508109] lowmem_reserve[]: 0 0 1 1 1
[ 3142.512234] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3142.539199] lowmem_reserve[]: 0 0 0 0 0
[ 3142.543320] Node 1 Normal free:1794268kB min:53876kB low:67344kB high:80812kB active_anon:160972kB inactive_anon:100268kB active_file:17060kB inactive_file:341028kB unevictable:0kB writepending:352kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46656kB pagetables:77908kB bounce:0kB free_pcp:2644kB local_pcp:1468kB free_cma:0kB
15:31:57 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x4, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:57 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080)=<r0=>0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x20, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x8, '\x00', r1, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3000, 0xb, 0x40, 0xffffffff}, 0x10, 0x0, r2, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x961, 0xffffffffffffffff, &(0x7f0000000980)="7b130eb4e9974d169e888c3d6354d405edc5e2d310c238ccc7cb5da54aec3085a7b306c727174bf322095a9130e8d386f6c1787a6e1511ebe2db909f566fbb0d4eb761be5e22932e876fba4c6dd6abb666ada5e5714dbb1434007499a5717266cc258459c2b029c435332eb6c232402f8c9553c9975a0102b87fdc29f990f87f9dfb6dec9b702152eac7cea8ad955309ca5d86e48c79ca4ad37527081c72eff672a2", 0xa2, 0x7f, 0x0, 0xa91b44dbbc345b86}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x101, 0xffffffffffffffff, &(0x7f0000000380)="0afd2fbca2258241760f51c5636fd645d216986681f644506ed5a9deb049bb720998db2fa44d8d0921f7996fa25dc7e86a64f27a5071bacd2b38faa15a82bb247454ad9fe1830875b0099f3fb81b1cbc4f27a599e700caa5cab4ed58fa3e4bf8952705087dde978f8a3e6f6c6b95dd27d9c350cbfbeef08ae53ebacb941db56eb0eef294ac79a5533f9bd428fab778534e940838d50fc5da1b66b0a79ae41db6bb8987fd44c509aa431baa82183bc5424a", 0x4e, 0x7, 0x0, 0x2, r2}])
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:31:57 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:57 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3142.575190] 0 pages HighMem/MovableOnly
[ 3142.579307] 369649 pages reserved
[ 3142.582846] 0 pages cma reserved
[ 3142.659316] lowmem_reserve[]: 0 0 0 0 0
[ 3142.736355] Node 0 DMA: 5*4kB (ME) 24*8kB (UH) 9*16kB (UMH) 1*32kB (H) 0*64kB 3*128kB (UM) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11012kB
[ 3143.023595] Node 0 DMA32: 1924*4kB (UME) 1808*8kB (UM) 652*16kB (UM) 136*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36944kB
[ 3143.037469] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3143.048608] Node 1 Normal: 4338*4kB (UME) 2817*8kB (UME) 1869*16kB (UME) 2482*32kB (UME) 1218*64kB (UME) 1692*128kB (M) 1219*256kB (M) 816*512kB (UME) 420*1024kB (UME) 2*2048kB (ME) 45*4096kB (M) = 1792096kB
[ 3143.067725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
15:31:58 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:58 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3143.216370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3143.325186] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3143.439318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
15:31:58 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:31:58 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 64)
io_setup(0x6, &(0x7f0000000080)=<r0=>0x0) (async, rerun: 64)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async, rerun: 64)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB]) (async, rerun: 64)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x20, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x8, '\x00', r1, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3000, 0xb, 0x40, 0xffffffff}, 0x10, 0x0, r2, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async)
io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x961, 0xffffffffffffffff, &(0x7f0000000980)="7b130eb4e9974d169e888c3d6354d405edc5e2d310c238ccc7cb5da54aec3085a7b306c727174bf322095a9130e8d386f6c1787a6e1511ebe2db909f566fbb0d4eb761be5e22932e876fba4c6dd6abb666ada5e5714dbb1434007499a5717266cc258459c2b029c435332eb6c232402f8c9553c9975a0102b87fdc29f990f87f9dfb6dec9b702152eac7cea8ad955309ca5d86e48c79ca4ad37527081c72eff672a2", 0xa2, 0x7f, 0x0, 0xa91b44dbbc345b86}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x101, 0xffffffffffffffff, &(0x7f0000000380)="0afd2fbca2258241760f51c5636fd645d216986681f644506ed5a9deb049bb720998db2fa44d8d0921f7996fa25dc7e86a64f27a5071bacd2b38faa15a82bb247454ad9fe1830875b0099f3fb81b1cbc4f27a599e700caa5cab4ed58fa3e4bf8952705087dde978f8a3e6f6c6b95dd27d9c350cbfbeef08ae53ebacb941db56eb0eef294ac79a5533f9bd428fab778534e940838d50fc5da1b66b0a79ae41db6bb8987fd44c509aa431baa82183bc5424a", 0x4e, 0x7, 0x0, 0x2, r2}]) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3143.514509] 82570 total pagecache pages
[ 3143.518522] 0 pages in swap cache
[ 3143.521988] Swap cache stats: add 0, delete 0, find 0/0
[ 3143.527623] Free swap  = 0kB
[ 3143.530649] Total swap = 0kB
[ 3143.538938] 2097051 pages RAM
[ 3143.542061] 0 pages HighMem/MovableOnly
[ 3143.546388] 369649 pages reserved
[ 3143.549846] 0 pages cma reserved
15:31:58 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3143.842557] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
15:31:59 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3144.021310] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3144.036052] CPU: 1 PID: 28979 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3144.043969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3144.053328] Call Trace:
[ 3144.055952]  dump_stack+0x1fc/0x2ef
[ 3144.059593]  warn_alloc.cold+0x7b/0x18f
[ 3144.063580]  ? zone_watermark_ok_safe+0x260/0x260
[ 3144.068430]  ? try_to_free_pages+0x2d7/0x7c0
[ 3144.072862]  ? wait_for_completion_io+0x10/0x10
[ 3144.077554]  __alloc_pages_nodemask+0x232f/0x2890
[ 3144.082414]  ? debug_check_no_obj_freed+0x201/0x490
[ 3144.087457]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3144.092312]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3144.097429]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3144.102046]  alloc_new_node_page+0x2b6/0x400
[ 3144.106468]  migrate_pages+0x528/0x2fe0
[ 3144.110461]  ? mpol_set_nodemask+0x450/0x450
[ 3144.114885]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3144.120437]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3144.126004]  kernel_move_pages+0xde2/0x1820
[ 3144.130440]  ? migrate_pages+0x2fe0/0x2fe0
[ 3144.134683]  ? __se_sys_futex+0x28f/0x3b0
[ 3144.138842]  ? __se_sys_futex+0x298/0x3b0
[ 3144.143010]  ? do_futex+0x1880/0x1880
[ 3144.146824]  __x64_sys_move_pages+0xdd/0x1b0
[ 3144.151243]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3144.155839]  do_syscall_64+0xf9/0x620
[ 3144.159657]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3144.164855] RIP: 0033:0x7f1e38c8fe99
15:31:59 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080)=<r0=>0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
io_setup(0xa, &(0x7f0000000080)) (async, rerun: 32)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000060000000000000001000000852000000100000018000000c0ffffff00000000000000805a2600000800000085200000020000006324c8d4ed1852000008000000000000000000000095000013d2180793026324d7830bc0417021b3e734279ea807d0659f2b6d5bc60a50cc706d8babc7f61ab5455bde342c14ddf86b6b98ce561992ed839df972600474dad06578d35177a138f041b85891ebf2c601638fc3f9c0d25f68c79ada01e14a1618838c0d43eb1818f36500333bc76259d7beae68eafb7ee53cd19901efc9bc6399fb450fe6b7dbc2f60183c0f2918738b0bd2e3153197382c1a6899931c04dc91d723d74a53bca34d29c5b"], &(0x7f0000000040)='GPL\x00', 0x20, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x8, '\x00', r1, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3000, 0xb, 0x40, 0xffffffff}, 0x10, 0x0, r2, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async)
io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x961, 0xffffffffffffffff, &(0x7f0000000980)="7b130eb4e9974d169e888c3d6354d405edc5e2d310c238ccc7cb5da54aec3085a7b306c727174bf322095a9130e8d386f6c1787a6e1511ebe2db909f566fbb0d4eb761be5e22932e876fba4c6dd6abb666ada5e5714dbb1434007499a5717266cc258459c2b029c435332eb6c232402f8c9553c9975a0102b87fdc29f990f87f9dfb6dec9b702152eac7cea8ad955309ca5d86e48c79ca4ad37527081c72eff672a2", 0xa2, 0x7f, 0x0, 0xa91b44dbbc345b86}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x101, 0xffffffffffffffff, &(0x7f0000000380)="0afd2fbca2258241760f51c5636fd645d216986681f644506ed5a9deb049bb720998db2fa44d8d0921f7996fa25dc7e86a64f27a5071bacd2b38faa15a82bb247454ad9fe1830875b0099f3fb81b1cbc4f27a599e700caa5cab4ed58fa3e4bf8952705087dde978f8a3e6f6c6b95dd27d9c350cbfbeef08ae53ebacb941db56eb0eef294ac79a5533f9bd428fab778534e940838d50fc5da1b66b0a79ae41db6bb8987fd44c509aa431baa82183bc5424a", 0x4e, 0x7, 0x0, 0x2, r2}])
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3144.168578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3144.187484] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3144.195204] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3144.202483] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3144.209761] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3144.217037] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3144.224310] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3144.243314] warn_alloc_show_mem: 1 callbacks suppressed
[ 3144.243319] Mem-Info:
[ 3144.248226] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3144.248722] active_anon:247007 inactive_anon:67444 isolated_anon:1145
[ 3144.248722]  active_file:4267 inactive_file:85274 isolated_file:0
[ 3144.248722]  unevictable:0 dirty:103 writeback:0 unstable:0
[ 3144.248722]  slab_reclaimable:136745 slab_unreclaimable:317205
[ 3144.248722]  mapped:76219 shmem:71879 pagetables:22793 bounce:0
[ 3144.248722]  free:459791 free_pcp:1083 free_cma:0
[ 3144.248752] Node 0 active_anon:824956kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3144.248774] Node 1 active_anon:163072kB inactive_anon:100268kB active_file:17064kB inactive_file:341092kB unevictable:0kB isolated(anon):4580kB isolated(file):0kB mapped:93184kB dirty:412kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3144.248782] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3144.253798] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 3144.292569] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3144.424927] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3144.439528] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3144.439577] ieee802154 phy0 wpan0: encryption failed: -22
[ 3144.449310] Node 0 DMA32 free:35864kB min:35996kB low:44992kB high:53988kB active_anon:824844kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1464kB local_pcp:488kB free_cma:0kB
[ 3144.454246] ieee802154 phy1 wpan1: encryption failed: -22
[ 3144.523750] lowmem_reserve[]: 0 0 1 1 1
[ 3144.527841] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3144.553695] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3144.554742] CPU: 0 PID: 29010 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3144.566709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3144.576243] Call Trace:
[ 3144.578847]  dump_stack+0x1fc/0x2ef
[ 3144.582484]  warn_alloc.cold+0x7b/0x18f
[ 3144.586471]  ? zone_watermark_ok_safe+0x260/0x260
[ 3144.591321]  ? try_to_free_pages+0x2d7/0x7c0
[ 3144.595746]  ? wait_for_completion_io+0x10/0x10
[ 3144.600433]  __alloc_pages_nodemask+0x232f/0x2890
[ 3144.605286]  ? debug_check_no_obj_freed+0x201/0x490
[ 3144.610316]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3144.615182]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3144.620295]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3144.624908]  alloc_new_node_page+0x2b6/0x400
[ 3144.629323]  migrate_pages+0x528/0x2fe0
[ 3144.633303]  ? mpol_set_nodemask+0x450/0x450
[ 3144.637731]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3144.643275]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3144.648657]  kernel_move_pages+0xde2/0x1820
[ 3144.652997]  ? migrate_pages+0x2fe0/0x2fe0
[ 3144.657242]  ? __se_sys_futex+0x28f/0x3b0
[ 3144.661389]  ? __se_sys_futex+0x298/0x3b0
[ 3144.665545]  ? do_futex+0x1880/0x1880
[ 3144.669349]  __x64_sys_move_pages+0xdd/0x1b0
[ 3144.673763]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3144.678347]  do_syscall_64+0xf9/0x620
[ 3144.682152]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3144.687343] RIP: 0033:0x7fe0a8319e99
[ 3144.691052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3144.709962] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3144.717676] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3144.724952] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3144.732394] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3144.739664] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3144.746929] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
[ 3144.754218] CPU: 1 PID: 29000 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3144.759211] lowmem_reserve[]: 0 0 0 0 0
[ 3144.762106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3144.762111] Call Trace:
[ 3144.762131]  dump_stack+0x1fc/0x2ef
[ 3144.762149]  warn_alloc.cold+0x7b/0x18f
[ 3144.767438] Node 1 Normal free:1795380kB min:53876kB low:67344kB high:80812kB active_anon:161372kB inactive_anon:100268kB active_file:17064kB inactive_file:341092kB unevictable:0kB writepending:412kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46784kB pagetables:78184kB bounce:0kB free_pcp:2740kB local_pcp:1308kB free_cma:0kB
[ 3144.775455]  ? zone_watermark_ok_safe+0x260/0x260
[ 3144.775468]  ? try_to_free_pages+0x2d7/0x7c0
[ 3144.775492]  ? wait_for_completion_io+0x10/0x10
[ 3144.775517]  __alloc_pages_nodemask+0x232f/0x2890
[ 3144.775537]  ? rcu_nmi_exit+0xb3/0x180
[ 3144.775561]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3144.778233] lowmem_reserve[]: 0 0 0 0 0
[ 3144.781777]  ? _raw_spin_unlock_irqrestore+0xa3/0xe0
[ 3144.781817]  alloc_new_node_page+0x2b6/0x400
[ 3144.785841] Node 0 DMA: 5*4kB (ME) 25*8kB (UMH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3144.816190]  migrate_pages+0x528/0x2fe0
[ 3144.816209]  ? mpol_set_nodemask+0x450/0x450
[ 3144.816233]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3144.816249]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3144.816273]  kernel_move_pages+0xde2/0x1820
[ 3144.816296]  ? migrate_pages+0x2fe0/0x2fe0
[ 3144.821200] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3144.825505]  ? __se_sys_futex+0x28f/0x3b0
[ 3144.825518]  ? __se_sys_futex+0x298/0x3b0
[ 3144.825537]  ? do_futex+0x1880/0x1880
[ 3144.825561]  __x64_sys_move_pages+0xdd/0x1b0
[ 3144.835089] Node 0 DMA32: 1912*4kB (UE) 1691*8kB (UM) 648*16kB (M) 135*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35864kB
[ 3144.838919]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3144.838935]  do_syscall_64+0xf9/0x620
[ 3144.852552] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3144.852815]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3144.861660] Node 1 Normal: 4381*4kB (UME) 2631*8kB (UME) 2010*16kB (UME) 2513*32kB (UME) 1239*64kB (UME) 1708*128kB (M) 1225*256kB (M) 819*512kB (UME) 421*1024kB (UME) 1*2048kB (E) 44*4096kB (M) = 1795372kB
[ 3144.872705] RIP: 0033:0x7f992dec9e99
[ 3144.872719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3144.872727] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3144.872741] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3144.872753] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3144.893373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3144.896277] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3144.896285] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3144.896293] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3145.010554] CPU: 1 PID: 28996 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3145.063463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3145.072831] Call Trace:
[ 3145.075446]  dump_stack+0x1fc/0x2ef
[ 3145.079094]  warn_alloc.cold+0x7b/0x18f
[ 3145.083434]  ? zone_watermark_ok_safe+0x260/0x260
[ 3145.084888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3145.088287]  ? try_to_free_pages+0x2d7/0x7c0
[ 3145.088312]  ? wait_for_completion_io+0x10/0x10
[ 3145.100974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3145.101278]  __alloc_pages_nodemask+0x232f/0x2890
[ 3145.106936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3145.114749]  ? debug_check_no_obj_freed+0x201/0x490
[ 3145.114774]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3145.114789]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3145.114806]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3145.114844]  alloc_new_node_page+0x2b6/0x400
[ 3145.122391] 82584 total pagecache pages
[ 3145.128226]  migrate_pages+0x528/0x2fe0
[ 3145.128245]  ? mpol_set_nodemask+0x450/0x450
[ 3145.128270]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3145.128285]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3145.128308]  kernel_move_pages+0xde2/0x1820
[ 3145.138250] 0 pages in swap cache
[ 3145.143230]  ? migrate_pages+0x2fe0/0x2fe0
[ 3145.143244]  ? __se_sys_futex+0x28f/0x3b0
[ 3145.143257]  ? __se_sys_futex+0x298/0x3b0
[ 3145.143275]  ? do_futex+0x1880/0x1880
[ 3145.143294]  __x64_sys_move_pages+0xdd/0x1b0
[ 3145.143310]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3145.143322]  do_syscall_64+0xf9/0x620
[ 3145.143340]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3145.143354] RIP: 0033:0x7f6a683bfe99
[ 3145.153911] Swap cache stats: add 0, delete 0, find 0/0
[ 3145.156276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3145.156284] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3145.156300] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3145.165045] Free swap  = 0kB
[ 3145.170175] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3145.182597] Total swap = 0kB
15:32:00 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:00 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:00 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {r0}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:00 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x800000000000, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x768000000000, 0x9, 0x0, <r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000001c0)=0x2)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:32:00 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:00 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3145.183261] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3145.183269] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3145.183276] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3145.301317] 2097051 pages RAM
[ 3145.304542] 0 pages HighMem/MovableOnly
[ 3145.308517] 369649 pages reserved
[ 3145.311966] 0 pages cma reserved
15:32:01 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:01 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x800000000000, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x768000000000, 0x9, 0x0, <r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000001c0)=0x2)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3146.289682] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3146.305416] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3146.310076] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
15:32:01 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3146.332161] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3146.345102] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3146.351800] CPU: 1 PID: 29050 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3146.355810] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3146.359718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3146.359724] Call Trace:
[ 3146.359746]  dump_stack+0x1fc/0x2ef
[ 3146.359764]  warn_alloc.cold+0x7b/0x18f
[ 3146.359783]  ? zone_watermark_ok_safe+0x260/0x260
[ 3146.395888]  ? try_to_free_pages+0x2d7/0x7c0
[ 3146.400324]  ? wait_for_completion_io+0x10/0x10
[ 3146.405028]  __alloc_pages_nodemask+0x232f/0x2890
[ 3146.409909]  ? debug_check_no_obj_freed+0x201/0x490
[ 3146.413986] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3146.414948]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3146.414965]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3146.429984]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3146.432133] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 3146.434592]  alloc_new_node_page+0x2b6/0x400
[ 3146.434609]  migrate_pages+0x528/0x2fe0
[ 3146.434627]  ? mpol_set_nodemask+0x450/0x450
[ 3146.434653]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3146.434668]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3146.434692]  kernel_move_pages+0xde2/0x1820
[ 3146.434715]  ? migrate_pages+0x2fe0/0x2fe0
[ 3146.434729]  ? __se_sys_futex+0x28f/0x3b0
[ 3146.434744]  ? __se_sys_futex+0x298/0x3b0
[ 3146.480291]  ? do_futex+0x1880/0x1880
[ 3146.484118]  __x64_sys_move_pages+0xdd/0x1b0
[ 3146.488544]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3146.493140]  do_syscall_64+0xf9/0x620
[ 3146.496954]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3146.502153] RIP: 0033:0x7f12f54cce99
[ 3146.505869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3146.524781] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3146.532502] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3146.539783] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3146.547060] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3146.554331] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3146.561606] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3146.568901] CPU: 0 PID: 29056 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3146.576795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3146.586152] Call Trace:
[ 3146.588749]  dump_stack+0x1fc/0x2ef
[ 3146.592379]  warn_alloc.cold+0x7b/0x18f
[ 3146.596362]  ? zone_watermark_ok_safe+0x260/0x260
[ 3146.601202]  ? try_to_free_pages+0x2d7/0x7c0
[ 3146.605612]  ? wait_for_completion_io+0x10/0x10
[ 3146.610375]  __alloc_pages_nodemask+0x232f/0x2890
[ 3146.615235]  ? debug_check_no_obj_freed+0x201/0x490
[ 3146.620267]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3146.625107]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3146.630230]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3146.634847]  alloc_new_node_page+0x2b6/0x400
[ 3146.639271]  migrate_pages+0x528/0x2fe0
[ 3146.643254]  ? mpol_set_nodemask+0x450/0x450
[ 3146.647668]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3146.653201]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3146.658579]  kernel_move_pages+0xde2/0x1820
[ 3146.662926]  ? migrate_pages+0x2fe0/0x2fe0
[ 3146.667164]  ? retint_kernel+0x2d/0x2d
[ 3146.671073]  __x64_sys_move_pages+0xdd/0x1b0
[ 3146.675486]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3146.680065]  do_syscall_64+0xf9/0x620
[ 3146.683868]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3146.689138] RIP: 0033:0x7f992dec9e99
[ 3146.692856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3146.711754] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3146.719457] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3146.726720] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3146.733984] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3146.741244] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3146.748502] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3146.755781] CPU: 1 PID: 29054 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3146.763669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3146.773026] Call Trace:
[ 3146.775623]  dump_stack+0x1fc/0x2ef
[ 3146.779258]  warn_alloc.cold+0x7b/0x18f
[ 3146.783244]  ? zone_watermark_ok_safe+0x260/0x260
[ 3146.788102]  ? try_to_free_pages+0x2d7/0x7c0
[ 3146.792538]  ? wait_for_completion_io+0x10/0x10
[ 3146.797233]  __alloc_pages_nodemask+0x232f/0x2890
[ 3146.802186]  ? rcu_nmi_exit+0xb3/0x180
[ 3146.806098]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3146.810979]  alloc_new_node_page+0x2b6/0x400
[ 3146.815408]  migrate_pages+0x528/0x2fe0
[ 3146.819398]  ? mpol_set_nodemask+0x450/0x450
[ 3146.823822]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3146.829371]  ? retint_kernel+0x2d/0x2d
[ 3146.833271]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3146.838739]  ? kernel_move_pages+0xda9/0x1820
[ 3146.843249]  kernel_move_pages+0xde2/0x1820
[ 3146.847593]  ? migrate_pages+0x2fe0/0x2fe0
[ 3146.851836]  ? __se_sys_futex+0x28f/0x3b0
[ 3146.855990]  ? __se_sys_futex+0x298/0x3b0
[ 3146.860155]  ? do_futex+0x1880/0x1880
[ 3146.863979]  __x64_sys_move_pages+0xdd/0x1b0
[ 3146.868408]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3146.873008]  do_syscall_64+0xf9/0x620
[ 3146.876827]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3146.882020] RIP: 0033:0x7f1e38c8fe99
[ 3146.885739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3146.904643] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3146.912437] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3146.919706] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3146.926971] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3146.934338] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3146.941618] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3146.948920] CPU: 0 PID: 29066 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3146.956827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3146.966191] Call Trace:
[ 3146.968799]  dump_stack+0x1fc/0x2ef
[ 3146.972439]  warn_alloc.cold+0x7b/0x18f
[ 3146.974810] warn_alloc_show_mem: 3 callbacks suppressed
[ 3146.974815] Mem-Info:
[ 3146.976417]  ? zone_watermark_ok_safe+0x260/0x260
[ 3146.976432]  ? try_to_free_pages+0x2d7/0x7c0
[ 3146.976455]  ? wait_for_completion_io+0x10/0x10
[ 3146.981881] active_anon:246935 inactive_anon:67444 isolated_anon:841
[ 3146.981881]  active_file:4270 inactive_file:85293 isolated_file:0
[ 3146.981881]  unevictable:0 dirty:132 writeback:0 unstable:0
[ 3146.981881]  slab_reclaimable:136745 slab_unreclaimable:317459
[ 3146.981881]  mapped:76101 shmem:71879 pagetables:22742 bounce:0
[ 3146.981881]  free:459929 free_pcp:1057 free_cma:0
[ 3146.984205]  __alloc_pages_nodemask+0x232f/0x2890
[ 3146.984227]  ? debug_check_no_obj_freed+0x201/0x490
[ 3146.984250]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3146.984269]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3146.989175] Node 0 active_anon:826172kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3146.993498]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3146.993539]  alloc_new_node_page+0x2b6/0x400
[ 3146.993555]  migrate_pages+0x528/0x2fe0
[ 3146.998278] Node 1 active_anon:161568kB inactive_anon:100268kB active_file:17076kB inactive_file:341168kB unevictable:0kB isolated(anon):3364kB isolated(file):0kB mapped:92712kB dirty:528kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3147.032757]  ? mpol_set_nodemask+0x450/0x450
[ 3147.032785]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3147.032801]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3147.032824]  kernel_move_pages+0xde2/0x1820
[ 3147.032847]  ? migrate_pages+0x2fe0/0x2fe0
[ 3147.037785] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3147.042669]  ? __se_sys_futex+0x28f/0x3b0
[ 3147.042683]  ? __se_sys_futex+0x298/0x3b0
[ 3147.042702]  ? do_futex+0x1880/0x1880
[ 3147.047594] lowmem_reserve[]: 0 2693 2695 2695 2695
15:32:02 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3147.052626]  __x64_sys_move_pages+0xdd/0x1b0
[ 3147.052644]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3147.052661]  do_syscall_64+0xf9/0x620
[ 3147.082022] Node 0 DMA32 free:38728kB min:35996kB low:44992kB high:53988kB active_anon:826060kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1460kB local_pcp:1260kB free_cma:0kB
[ 3147.085068]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3147.085081] RIP: 0033:0x7fe0a8319e99
[ 3147.085096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3147.085103] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3147.085119] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3147.089578] lowmem_reserve[]: 0 0 1 1 1
[ 3147.093464] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
15:32:02 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x800000000000, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async, rerun: 64)
io_submit(0x0, 0x0, 0x0) (rerun: 64)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x768000000000, 0x9, 0x0, <r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000001c0)=0x2) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:32:02 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, 0x0)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3147.093476] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3147.093484] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3147.093492] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
15:32:02 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3147.858092] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3148.050249] lowmem_reserve[]: 0 0 0 0 0
[ 3148.083516] Node 1 Normal free:1792136kB min:53876kB low:67344kB high:80812kB active_anon:161636kB inactive_anon:100268kB active_file:17076kB inactive_file:341200kB unevictable:0kB writepending:560kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:47104kB pagetables:78272kB bounce:0kB free_pcp:2704kB local_pcp:1268kB free_cma:0kB
[ 3148.151479] warn_alloc_show_mem: 2 callbacks suppressed
[ 3148.151485] Mem-Info:
[ 3148.169348] active_anon:246708 inactive_anon:67444 isolated_anon:567
[ 3148.169348]  active_file:4270 inactive_file:85301 isolated_file:0
[ 3148.169348]  unevictable:0 dirty:140 writeback:0 unstable:0
[ 3148.169348]  slab_reclaimable:136744 slab_unreclaimable:317502
[ 3148.169348]  mapped:76107 shmem:71879 pagetables:22741 bounce:0
[ 3148.169348]  free:460424 free_pcp:1040 free_cma:0
[ 3148.210867] lowmem_reserve[]: 0 0 0 0 0
[ 3148.230893] Node 0 DMA: 5*4kB (ME) 25*8kB (UMH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3148.270986] Node 0 DMA32: 1936*4kB (UME) 1615*8kB (M) 692*16kB (UM) 149*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36568kB
[ 3148.282843] Node 0 active_anon:824096kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3148.307516] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3148.325817] Node 1 active_anon:162636kB inactive_anon:100268kB active_file:17076kB inactive_file:341200kB unevictable:0kB isolated(anon):1568kB isolated(file):0kB mapped:93236kB dirty:560kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3148.355161] Node 1 Normal: 4297*4kB (UME) 2688*8kB (UME) 1867*16kB (UME) 2434*32kB (UME) 1249*64kB (UME) 1718*128kB (M) 1236*256kB (M) 830*512kB (UME) 429*1024kB (UME) 1*2048kB (E) 40*4096kB (M) = 1792852kB
[ 3148.374075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3148.382992] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3148.395608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3148.411676] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3148.424234] Node 0 DMA32 free:37268kB min:35996kB low:44992kB high:53988kB active_anon:823984kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:2964kB local_pcp:1444kB free_cma:0kB
[ 3148.426705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3148.454839] lowmem_reserve[]: 0 0 1 1 1
[ 3148.467938] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3148.479033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3148.495421] lowmem_reserve[]: 0 0 0 0 0
[ 3148.508096] 82603 total pagecache pages
[ 3148.514406] 0 pages in swap cache
[ 3148.516678] Node 1 Normal free:1796008kB min:53876kB low:67344kB high:80812kB active_anon:161436kB inactive_anon:100268kB active_file:17076kB inactive_file:341200kB unevictable:0kB writepending:560kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46752kB pagetables:78124kB bounce:0kB free_pcp:2804kB local_pcp:1412kB free_cma:0kB
[ 3148.533225] Swap cache stats: add 0, delete 0, find 0/0
[ 3148.550136] lowmem_reserve[]: 0 0 0 0 0
[ 3148.558630] Node 0 DMA: 5*4kB (ME) 25*8kB (UMH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3148.575744] Node 0 DMA32: 2089*4kB (UME) 1633*8kB (M) 692*16kB (UM) 149*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37324kB
[ 3148.586875] Free swap  = 0kB
[ 3148.591657] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3148.602132] Total swap = 0kB
[ 3148.605092] Node 1 Normal: 4346*4kB (UME) 2977*8kB (UME) 1871*16kB (UME) 2439*32kB (UME) 1252*64kB (UME) 1718*128kB (M) 1236*256kB (M) 830*512kB (UME) 429*1024kB (UME) 1*2048kB (E) 40*4096kB (M) = 1795776kB
[ 3148.609314] 2097051 pages RAM
[ 3148.625916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3148.625929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3148.625940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3148.625950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3148.625956] 82603 total pagecache pages
[ 3148.625969] 0 pages in swap cache
15:32:03 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe800000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:03 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:03 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:03 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, 0x0)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:03 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e2c00c0001200a5e2226c3368d700"/24])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x7, 0x1, 0x9, 0x3, 'syz0\x00', 0xfffb}, 0x0, 0x167074444a102cfd, 0x2, 0xffffffffffffffff, 0x5, 0x6, 'syz1\x00', &(0x7f0000000000)=['\x00', 'nbd\x00\x0eB\x19\xb6e(\xbf\x10\xc3\'\xec\x04\x13\xa0\x9e\xfbT\xb1l\xb32\xf1\x95>km2\xfb\x18\xea\xc1\x81I\xc2\xdf\xbb\xbeh\x16\x8e\xf7\xad\xa6\xb1-', 'nbd\x00', '\x00', 'syz0\x00'], 0x3c, '\x00', [0x1, 0xfffb, 0x1, 0x4]})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:32:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3148.625977] Swap cache stats: add 0, delete 0, find 0/0
[ 3148.625982] Free swap  = 0kB
[ 3148.625987] Total swap = 0kB
[ 3148.625996] 2097051 pages RAM
[ 3148.626002] 0 pages HighMem/MovableOnly
[ 3148.626007] 369649 pages reserved
[ 3148.626012] 0 pages cma reserved
[ 3148.697831] 0 pages HighMem/MovableOnly
[ 3148.701805] 369649 pages reserved
[ 3148.705334] 0 pages cma reserved
15:32:04 executing program 1:
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee01}, 0x8, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:04 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 32)
io_setup(0x6, &(0x7f0000000080)) (async, rerun: 32)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async, rerun: 64)
exit(0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e2c00c0001200a5e2226c3368d700"/24])
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x7, 0x1, 0x9, 0x3, 'syz0\x00', 0xfffb}, 0x0, 0x167074444a102cfd, 0x2, 0xffffffffffffffff, 0x5, 0x6, 'syz1\x00', &(0x7f0000000000)=['\x00', 'nbd\x00\x0eB\x19\xb6e(\xbf\x10\xc3\'\xec\x04\x13\xa0\x9e\xfbT\xb1l\xb32\xf1\x95>km2\xfb\x18\xea\xc1\x81I\xc2\xdf\xbb\xbeh\x16\x8e\xf7\xad\xa6\xb1-', 'nbd\x00', '\x00', 'syz0\x00'], 0x3c, '\x00', [0x1, 0xfffb, 0x1, 0x4]}) (async, rerun: 64)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)

[ 3149.724298] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3149.750473] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3149.761783] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3149.774201] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3149.774228] CPU: 0 PID: 29127 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3149.774236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3149.774241] Call Trace:
[ 3149.774264]  dump_stack+0x1fc/0x2ef
[ 3149.774284]  warn_alloc.cold+0x7b/0x18f
[ 3149.774303]  ? zone_watermark_ok_safe+0x260/0x260
[ 3149.774318]  ? try_to_free_pages+0x2d7/0x7c0
[ 3149.774342]  ? wait_for_completion_io+0x10/0x10
[ 3149.782063] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3149.787300]  __alloc_pages_nodemask+0x232f/0x2890
[ 3149.787325]  ? rcu_nmi_exit+0xb3/0x180
[ 3149.787356]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3149.787373]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3149.787389]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3149.787422]  alloc_new_node_page+0x2b6/0x400
[ 3149.787439]  migrate_pages+0x528/0x2fe0
[ 3149.787459]  ? mpol_set_nodemask+0x450/0x450
[ 3149.787483]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3149.848495] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3149.850908]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3149.850938]  kernel_move_pages+0xde2/0x1820
[ 3149.850964]  ? migrate_pages+0x2fe0/0x2fe0
[ 3149.850981]  ? retint_kernel+0x2d/0x2d
[ 3149.872201] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3149.874004]  ? __x64_sys_move_pages+0xd/0x1b0
[ 3149.874026]  __x64_sys_move_pages+0xdd/0x1b0
[ 3149.874041]  ? do_syscall_64+0xe9/0x620
[ 3149.874055]  do_syscall_64+0xf9/0x620
[ 3149.874074]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3149.874086] RIP: 0033:0x7f1e38c8fe99
[ 3149.874100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3149.874110] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3149.897662] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 3149.902045] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3149.902056] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3149.902065] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3149.902074] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3149.902082] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
[ 3149.912764] CPU: 0 PID: 29128 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3150.004002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3150.013350] Call Trace:
[ 3150.015941]  dump_stack+0x1fc/0x2ef
[ 3150.019572]  warn_alloc.cold+0x7b/0x18f
[ 3150.023548]  ? zone_watermark_ok_safe+0x260/0x260
[ 3150.028389]  ? try_to_free_pages+0x2d7/0x7c0
[ 3150.032816]  ? wait_for_completion_io+0x10/0x10
[ 3150.037502]  __alloc_pages_nodemask+0x232f/0x2890
[ 3150.042363]  ? rcu_nmi_exit+0xb3/0x180
[ 3150.046264]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3150.051112]  ? rcu_nmi_exit+0xb3/0x180
[ 3150.055029]  alloc_new_node_page+0x2b6/0x400
[ 3150.059445]  migrate_pages+0x528/0x2fe0
[ 3150.063422]  ? mpol_set_nodemask+0x450/0x450
[ 3150.067839]  ? migrate_huge_page_move_mapping+0x810/0x810
15:32:05 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {r0}, {0xee01}, 0x0, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3150.073380]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3150.078754]  kernel_move_pages+0xde2/0x1820
[ 3150.083080]  ? migrate_pages+0x2fe0/0x2fe0
[ 3150.087319]  ? __se_sys_futex+0x28f/0x3b0
[ 3150.091468]  ? __se_sys_futex+0x298/0x3b0
[ 3150.095623]  ? do_futex+0x1880/0x1880
[ 3150.099429]  __x64_sys_move_pages+0xdd/0x1b0
[ 3150.103844]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3150.107466] Mem-Info:
[ 3150.108425]  do_syscall_64+0xf9/0x620
[ 3150.108448]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3150.108460] RIP: 0033:0x7f12f54cce99
[ 3150.108475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3150.116594] active_anon:247336 inactive_anon:67444 isolated_anon:1148
[ 3150.116594]  active_file:4272 inactive_file:85306 isolated_file:1
[ 3150.116594]  unevictable:0 dirty:151 writeback:0 unstable:0
[ 3150.116594]  slab_reclaimable:136744 slab_unreclaimable:317682
[ 3150.116594]  mapped:76256 shmem:71879 pagetables:22835 bounce:0
[ 3150.116594]  free:458983 free_pcp:868 free_cma:0
[ 3150.119815] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3150.119830] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3150.119839] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3150.119847] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3150.119856] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3150.119865] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3150.124893] CPU: 0 PID: 29130 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3150.229472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3150.238830] Call Trace:
[ 3150.241432]  dump_stack+0x1fc/0x2ef
[ 3150.245080]  warn_alloc.cold+0x7b/0x18f
[ 3150.249253]  ? zone_watermark_ok_safe+0x260/0x260
[ 3150.254114]  ? try_to_free_pages+0x2d7/0x7c0
[ 3150.258545]  ? wait_for_completion_io+0x10/0x10
[ 3150.263232]  __alloc_pages_nodemask+0x232f/0x2890
[ 3150.268092]  ? debug_check_no_obj_freed+0x201/0x490
[ 3150.273135]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3150.277988]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3150.283105]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3150.287722]  alloc_new_node_page+0x2b6/0x400
[ 3150.292147]  migrate_pages+0x528/0x2fe0
[ 3150.296145]  ? mpol_set_nodemask+0x450/0x450
[ 3150.300578]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3150.306129]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3150.311514]  kernel_move_pages+0xde2/0x1820
[ 3150.315856]  ? migrate_pages+0x2fe0/0x2fe0
[ 3150.320099]  ? __se_sys_futex+0x28f/0x3b0
[ 3150.324256]  ? __se_sys_futex+0x298/0x3b0
[ 3150.328423]  ? do_futex+0x1880/0x1880
[ 3150.332238]  __x64_sys_move_pages+0xdd/0x1b0
[ 3150.336661]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3150.341247]  do_syscall_64+0xf9/0x620
[ 3150.345065]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3150.350257] RIP: 0033:0x7f6a683bfe99
[ 3150.353985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
15:32:05 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, 0x0)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:05 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3150.372888] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3150.380605] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3150.387880] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3150.395157] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3150.402433] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3150.409711] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3150.465941] CPU: 1 PID: 29138 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3150.473863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3150.483225] Call Trace:
[ 3150.485826]  dump_stack+0x1fc/0x2ef
[ 3150.489473]  warn_alloc.cold+0x7b/0x18f
[ 3150.493473]  ? zone_watermark_ok_safe+0x260/0x260
[ 3150.498321]  ? try_to_free_pages+0x2d7/0x7c0
[ 3150.502744]  ? wait_for_completion_io+0x10/0x10
[ 3150.503302] Node 0 active_anon:823452kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3150.507427]  __alloc_pages_nodemask+0x232f/0x2890
[ 3150.540096]  ? debug_check_no_obj_freed+0x201/0x490
[ 3150.545132]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3150.549990]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3150.555106]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3150.559720]  alloc_new_node_page+0x2b6/0x400
[ 3150.564138]  migrate_pages+0x528/0x2fe0
[ 3150.568117]  ? mpol_set_nodemask+0x450/0x450
[ 3150.572542]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3150.578087]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3150.583473]  kernel_move_pages+0xde2/0x1820
[ 3150.587810]  ? migrate_pages+0x2fe0/0x2fe0
[ 3150.592070]  ? __se_sys_futex+0x28f/0x3b0
[ 3150.596234]  ? __se_sys_futex+0x298/0x3b0
[ 3150.600403]  ? do_futex+0x1880/0x1880
[ 3150.604221]  __x64_sys_move_pages+0xdd/0x1b0
[ 3150.608641]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3150.613233]  do_syscall_64+0xf9/0x620
[ 3150.617047]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3150.622236] RIP: 0033:0x7fe0a8319e99
[ 3150.625950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3150.631046] Node 1 active_anon:166228kB inactive_anon:100268kB active_file:17084kB inactive_file:341224kB unevictable:0kB isolated(anon):4132kB isolated(file):0kB mapped:93332kB dirty:604kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3150.644868] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3150.644884] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3150.644892] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3150.644901] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3150.644910] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
15:32:05 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0) (async)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e2c00c0001200a5e2226c3368d700"/24]) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x7, 0x1, 0x9, 0x3, 'syz0\x00', 0xfffb}, 0x0, 0x167074444a102cfd, 0x2, 0xffffffffffffffff, 0x5, 0x6, 'syz1\x00', &(0x7f0000000000)=['\x00', 'nbd\x00\x0eB\x19\xb6e(\xbf\x10\xc3\'\xec\x04\x13\xa0\x9e\xfbT\xb1l\xb32\xf1\x95>km2\xfb\x18\xea\xc1\x81I\xc2\xdf\xbb\xbeh\x16\x8e\xf7\xad\xa6\xb1-', 'nbd\x00', '\x00', 'syz0\x00'], 0x3c, '\x00', [0x1, 0xfffb, 0x1, 0x4]})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3150.644918] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
15:32:06 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x40040}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:32:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {r0}, {0xee01}, 0x0, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3151.053149] warn_alloc_show_mem: 2 callbacks suppressed
[ 3151.053155] Mem-Info:
[ 3151.062320] active_anon:246305 inactive_anon:67444 isolated_anon:1506
[ 3151.062320]  active_file:4273 inactive_file:85318 isolated_file:0
[ 3151.062320]  unevictable:0 dirty:162 writeback:0 unstable:0
[ 3151.062320]  slab_reclaimable:136744 slab_unreclaimable:317201
[ 3151.062320]  mapped:76141 shmem:71879 pagetables:22780 bounce:0
[ 3151.062320]  free:459679 free_pcp:1379 free_cma:0
[ 3151.099896] Node 0 active_anon:823472kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3151.344424] Node 1 active_anon:162132kB inactive_anon:100268kB active_file:17088kB inactive_file:341268kB unevictable:0kB isolated(anon):5580kB isolated(file):0kB mapped:93372kB dirty:648kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3151.400369] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:80kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3151.407244] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:80kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3151.465391] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3151.481200] Node 0 DMA32 free:36976kB min:35996kB low:44992kB high:53988kB active_anon:825352kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:784kB local_pcp:84kB free_cma:0kB
[ 3151.501032] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3151.528440] Node 0 DMA32 free:37956kB min:35996kB low:44992kB high:53988kB active_anon:823352kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1388kB local_pcp:84kB free_cma:0kB
[ 3151.554778] lowmem_reserve[]: 0 0 1 1 1
[ 3151.566913] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3151.569221] lowmem_reserve[]: 0 0 1 1 1
[ 3151.596180] lowmem_reserve[]: 0 0 0 0 0
[ 3151.601347] Node 1 Normal free:1795048kB min:53876kB low:67344kB high:80812kB active_anon:161732kB inactive_anon:100268kB active_file:17088kB inactive_file:341268kB unevictable:0kB writepending:648kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46912kB pagetables:78280kB bounce:0kB free_pcp:2704kB local_pcp:1348kB free_cma:0kB
[ 3151.604910] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3151.632391] lowmem_reserve[]: 0 0 0 0 0
[ 3151.663738] Node 0 DMA: 5*4kB (ME) 24*8kB (UH) 9*16kB (UMH) 1*32kB (H) 0*64kB 3*128kB (UM) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11012kB
[ 3151.668748] lowmem_reserve[]: 0 0 0 0 0
[ 3151.681310] Node 0 DMA32: 2122*4kB (UME) 1782*8kB (UM) 653*16kB (UM) 139*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37640kB
[ 3151.690407] Node 1 Normal free:1794740kB min:53876kB low:67344kB high:80812kB active_anon:161732kB inactive_anon:100268kB active_file:17088kB inactive_file:341268kB unevictable:0kB writepending:648kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:46912kB pagetables:78280kB bounce:0kB free_pcp:2704kB local_pcp:1356kB free_cma:0kB
[ 3151.697981] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3151.735997] lowmem_reserve[]: 0 0 0 0 0
[ 3151.739528] Node 1 Normal: 4448*4kB (UME) 2878*8kB (UME) 1953*16kB (UME) 2435*32kB (UME) 1245*64kB (UME) 1714*128kB (M) 1236*256kB (M) 838*512kB (UME) 436*1024kB (UME) 1*2048kB (E) 37*4096kB (M) = 1794592kB
[ 3151.742552] Node 0 DMA: 5*4kB (ME) 24*8kB (UH) 9*16kB (UMH) 1*32kB (H) 0*64kB 3*128kB (UM) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11012kB
[ 3151.761690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3151.785959] Node 0 DMA32: 2122*4kB (UME) 1789*8kB (UM) 653*16kB (UM) 139*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37696kB
[ 3151.787178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3151.807516] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3151.809999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3151.827292] Node 1 Normal: 4448*4kB (UME) 2899*8kB (UME) 2011*16kB (UME) 2435*32kB (UME) 1245*64kB (UME) 1714*128kB (M) 1236*256kB (M) 838*512kB (UME) 436*1024kB (UME) 1*2048kB (E) 37*4096kB (M) = 1795688kB
[ 3151.829672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3151.854747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3151.856940] 82623 total pagecache pages
[ 3151.870714] 0 pages in swap cache
[ 3151.872552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3151.875656] Swap cache stats: add 0, delete 0, find 0/0
[ 3151.885541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3151.891649] Free swap  = 0kB
[ 3151.903007] Total swap = 0kB
[ 3151.904758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3151.906638] 2097051 pages RAM
[ 3151.914979] 82626 total pagecache pages
[ 3151.920663] 0 pages HighMem/MovableOnly
[ 3151.921970] 0 pages in swap cache
[ 3151.929829] Swap cache stats: add 0, delete 0, find 0/0
[ 3151.933587] 369649 pages reserved
[ 3151.935872] Free swap  = 0kB
[ 3151.941780] Total swap = 0kB
[ 3151.941995] 0 pages cma reserved
[ 3151.945312] 2097051 pages RAM
15:32:07 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, 0x0)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:07 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x6, &(0x7f0000000240)=[&(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {r0}, {0xee01}, 0x0, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:07 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, 0x0)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:07 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x40040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:32:07 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3151.951520] 0 pages HighMem/MovableOnly
[ 3151.955941] 369649 pages reserved
[ 3151.959478] 0 pages cma reserved
15:32:07 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x40040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:32:07 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
clone(0x8000000, &(0x7f00000001c0)="4de6ae43a1b459957548beaaa7bc76882211bde623050f1e0aec23117b43bdf9aa95ef5d08cccd27eb5ee5d588aa7cba1caf70fef2be5c249bb85ec29120f5f1874e2e115310606a94bb4d", &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000280)="abd15da9acc0cf1ed5c35b5557cb3a0e06e145402cda1292136498caadfc3e490c63565cb355f112a28dcce727343e226a7b75c723f3de8641d049778dd65e")
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:32:07 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3152.958852] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3152.971208] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3152.990219] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3152.995789] syz-executor.5: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3153.002590] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3153.019535] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3153.028092] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 3153.040677] CPU: 1 PID: 29236 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3153.048672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3153.058029] Call Trace:
[ 3153.060629]  dump_stack+0x1fc/0x2ef
[ 3153.064270]  warn_alloc.cold+0x7b/0x18f
[ 3153.067505] syz-executor.5 cpuset=/ mems_allowed=0-1
[ 3153.068255]  ? zone_watermark_ok_safe+0x260/0x260
[ 3153.078178]  ? try_to_free_pages+0x2d7/0x7c0
[ 3153.082608]  ? wait_for_completion_io+0x10/0x10
[ 3153.087292]  __alloc_pages_nodemask+0x232f/0x2890
[ 3153.087480] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3153.092144]  ? debug_check_no_obj_freed+0x201/0x490
[ 3153.092174]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3153.092188]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3153.092206]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3153.117224]  alloc_new_node_page+0x2b6/0x400
[ 3153.121639]  migrate_pages+0x528/0x2fe0
[ 3153.125618]  ? mpol_set_nodemask+0x450/0x450
[ 3153.130040]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3153.135579]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3153.137820] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3153.140956]  kernel_move_pages+0xde2/0x1820
[ 3153.140983]  ? migrate_pages+0x2fe0/0x2fe0
[ 3153.140998]  ? __se_sys_futex+0x28f/0x3b0
[ 3153.141013]  ? __se_sys_futex+0x298/0x3b0
[ 3153.162898]  ? do_futex+0x1880/0x1880
[ 3153.166708]  __x64_sys_move_pages+0xdd/0x1b0
[ 3153.171124]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3153.175705]  do_syscall_64+0xf9/0x620
[ 3153.179513]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3153.184700] RIP: 0033:0x7fe0a8319e99
[ 3153.188421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3153.207330] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3153.215046] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3153.222315] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3153.229584] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3153.236854] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3153.244125] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
[ 3153.251418] CPU: 0 PID: 29208 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3153.259307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3153.268659] Call Trace:
[ 3153.271253]  dump_stack+0x1fc/0x2ef
[ 3153.275004]  warn_alloc.cold+0x7b/0x18f
[ 3153.278980]  ? zone_watermark_ok_safe+0x260/0x260
[ 3153.283817]  ? try_to_free_pages+0x2d7/0x7c0
[ 3153.288234]  ? wait_for_completion_io+0x10/0x10
[ 3153.292905]  __alloc_pages_nodemask+0x232f/0x2890
[ 3153.297749]  ? debug_check_no_obj_freed+0x201/0x490
[ 3153.302772]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3153.307610]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3153.312708]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3153.317307]  alloc_new_node_page+0x2b6/0x400
[ 3153.321711]  migrate_pages+0x528/0x2fe0
[ 3153.325683]  ? mpol_set_nodemask+0x450/0x450
[ 3153.330092]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3153.335623]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3153.340991]  kernel_move_pages+0xde2/0x1820
[ 3153.345317]  ? migrate_pages+0x2fe0/0x2fe0
[ 3153.349545]  ? __se_sys_futex+0x28f/0x3b0
[ 3153.353690]  ? __se_sys_futex+0x298/0x3b0
[ 3153.357845]  ? do_futex+0x1880/0x1880
[ 3153.361650]  __x64_sys_move_pages+0xdd/0x1b0
[ 3153.366055]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3153.370634]  do_syscall_64+0xf9/0x620
[ 3153.374441]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3153.379620] RIP: 0033:0x7f992dec9e99
[ 3153.383326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3153.402219] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3153.409919] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3153.417188] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3153.424452] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3153.431711] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3153.438973] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3153.459185] CPU: 1 PID: 29209 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3153.467094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3153.476437] Call Trace:
[ 3153.479030]  dump_stack+0x1fc/0x2ef
[ 3153.482653]  warn_alloc.cold+0x7b/0x18f
[ 3153.486727]  ? zone_watermark_ok_safe+0x260/0x260
[ 3153.491561]  ? try_to_free_pages+0x2d7/0x7c0
[ 3153.495967]  ? wait_for_completion_io+0x10/0x10
[ 3153.500632]  __alloc_pages_nodemask+0x232f/0x2890
[ 3153.505471]  ? debug_check_no_obj_freed+0x201/0x490
[ 3153.510483]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3153.515319]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3153.520423]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3153.525031]  alloc_new_node_page+0x2b6/0x400
[ 3153.529432]  migrate_pages+0x528/0x2fe0
[ 3153.533405]  ? mpol_set_nodemask+0x450/0x450
[ 3153.537830]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3153.543361]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3153.548728]  kernel_move_pages+0xde2/0x1820
[ 3153.553051]  ? migrate_pages+0x2fe0/0x2fe0
[ 3153.557281]  ? __se_sys_futex+0x28f/0x3b0
[ 3153.561421]  ? __se_sys_futex+0x298/0x3b0
[ 3153.565561]  ? do_futex+0x1880/0x1880
[ 3153.569354]  __x64_sys_move_pages+0xdd/0x1b0
[ 3153.573762]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3153.578332]  do_syscall_64+0xf9/0x620
[ 3153.582128]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3153.587305] RIP: 0033:0x7f12f54cce99
[ 3153.591008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3153.609899] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3153.617602] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3153.624867] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3153.632123] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3153.639381] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3153.646640] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3153.667522] Mem-Info:
[ 3153.670161] active_anon:247026 inactive_anon:67444 isolated_anon:1420
[ 3153.670161]  active_file:4274 inactive_file:85323 isolated_file:0
[ 3153.670161]  unevictable:0 dirty:181 writeback:0 unstable:0
[ 3153.670161]  slab_reclaimable:136744 slab_unreclaimable:317366
[ 3153.670161]  mapped:76152 shmem:71879 pagetables:22849 bounce:0
[ 3153.670161]  free:459351 free_pcp:894 free_cma:0
[ 3153.670438] CPU: 1 PID: 29207 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3153.707845] Node 0 active_anon:825860kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3153.712592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3153.712598] Call Trace:
[ 3153.712621]  dump_stack+0x1fc/0x2ef
[ 3153.712640]  warn_alloc.cold+0x7b/0x18f
[ 3153.712659]  ? zone_watermark_ok_safe+0x260/0x260
[ 3153.749073] Node 1 active_anon:162244kB inactive_anon:100268kB active_file:17092kB inactive_file:341288kB unevictable:0kB isolated(anon):5680kB isolated(file):0kB mapped:92916kB dirty:724kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3153.749848]  ? try_to_free_pages+0x2d7/0x7c0
[ 3153.749878]  ? wait_for_completion_io+0x10/0x10
[ 3153.749902]  __alloc_pages_nodemask+0x232f/0x2890
[ 3153.752585] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:112kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3153.756082]  ? debug_check_no_obj_freed+0x201/0x490
[ 3153.756107]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3153.756122]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3153.756141]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3153.756177]  alloc_new_node_page+0x2b6/0x400
[ 3153.756193]  migrate_pages+0x528/0x2fe0
[ 3153.756211]  ? mpol_set_nodemask+0x450/0x450
[ 3153.760315] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3153.764998]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3153.765016]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3153.765040]  kernel_move_pages+0xde2/0x1820
[ 3153.765063]  ? migrate_pages+0x2fe0/0x2fe0
[ 3153.765078]  ? __se_sys_futex+0x28f/0x3b0
[ 3153.765091]  ? __se_sys_futex+0x298/0x3b0
[ 3153.765109]  ? do_futex+0x1880/0x1880
[ 3153.765130]  __x64_sys_move_pages+0xdd/0x1b0
[ 3153.800354] Node 0 DMA32 free:36548kB min:35996kB low:44992kB high:53988kB active_anon:825688kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:872kB local_pcp:388kB free_cma:0kB
[ 3153.802645]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3153.802662]  do_syscall_64+0xf9/0x620
[ 3153.802683]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3153.802698] RIP: 0033:0x7f6a683bfe99
[ 3153.807736] lowmem_reserve[]: 0 0 1 1 1
[ 3153.833882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3153.833890] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3153.833904] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3153.833913] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3153.833921] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3153.833928] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
15:32:09 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {r0}, {0xee01}, 0x0, 0x40})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3153.833936] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3153.842565] CPU: 1 PID: 29215 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[ 3153.845813] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3153.850542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
15:32:09 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {r0}, {0xee01}, 0x8})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3153.850548] Call Trace:
[ 3153.850570]  dump_stack+0x1fc/0x2ef
[ 3153.850592]  warn_alloc.cold+0x7b/0x18f
[ 3153.850610]  ? zone_watermark_ok_safe+0x260/0x260
[ 3153.850626]  ? try_to_free_pages+0x2d7/0x7c0
[ 3153.855461] lowmem_reserve[]: 0 0 0 0 0
[ 3153.859596]  ? wait_for_completion_io+0x10/0x10
[ 3153.859624]  __alloc_pages_nodemask+0x232f/0x2890
[ 3153.859648]  ? rcu_nmi_exit+0xb3/0x180
[ 3153.863832] Node 1 Normal free:1789876kB min:53876kB low:67344kB high:80812kB active_anon:162244kB inactive_anon:100268kB active_file:17092kB inactive_file:341288kB unevictable:0kB writepending:724kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:47040kB pagetables:78704kB bounce:0kB free_pcp:2684kB local_pcp:1356kB free_cma:0kB
[ 3153.867998]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3153.868017]  ? _raw_spin_unlock_irqrestore+0xa3/0xe0
[ 3153.868057]  alloc_new_node_page+0x2b6/0x400
[ 3153.873234] lowmem_reserve[]: 0 0 0 0 0
[ 3153.878565]  migrate_pages+0x528/0x2fe0
[ 3153.878586]  ? mpol_set_nodemask+0x450/0x450
[ 3153.878613]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3153.884205] Node 0 DMA: 5*4kB (ME) 25*8kB (UMH) 8*16kB (UMH) 2*32kB (MH) 1*64kB (M) 2*128kB (U) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB
[ 3153.888270]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3153.888299]  kernel_move_pages+0xde2/0x1820
[ 3153.888323]  ? migrate_pages+0x2fe0/0x2fe0
[ 3153.892657] Node 0 DMA32: 1857*4kB (UME) 1787*8kB (UM) 652*16kB (UM) 139*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36604kB
[ 3153.896671]  ? retint_kernel+0x2d/0x2d
[ 3153.896694]  __x64_sys_move_pages+0xdd/0x1b0
[ 3153.896710]  ? do_syscall_64+0x56/0x620
[ 3153.896725]  do_syscall_64+0xf9/0x620
[ 3153.896743]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3153.896754] RIP: 0033:0x7f1e38c8fe99
[ 3153.896769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
15:32:09 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080)) (async, rerun: 64)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async, rerun: 64)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async, rerun: 32)
io_submit(0x0, 0x0, 0x0) (async, rerun: 32)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async, rerun: 32)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async, rerun: 32)
clone(0x8000000, &(0x7f00000001c0)="4de6ae43a1b459957548beaaa7bc76882211bde623050f1e0aec23117b43bdf9aa95ef5d08cccd27eb5ee5d588aa7cba1caf70fef2be5c249bb85ec29120f5f1874e2e115310606a94bb4d", &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000280)="abd15da9acc0cf1ed5c35b5557cb3a0e06e145402cda1292136498caadfc3e490c63565cb355f112a28dcce727343e226a7b75c723f3de8641d049778dd65e") (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async, rerun: 64)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async, rerun: 64)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3153.901047] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3153.904672] RSP: 002b:00007f1e37605168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3153.904686] RAX: ffffffffffffffda RBX: 00007f1e38da2f60 RCX: 00007f1e38c8fe99
[ 3153.904695] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3153.904703] RBP: 00007f1e38ce9ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3153.904712] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3153.904720] R13: 00007ffcbbb481bf R14: 00007f1e37605300 R15: 0000000000022000
15:32:09 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:09 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa0300907800"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3154.369976] Node 1 Normal: 4527*4kB (UME) 2549*8kB (UME) 1901*16kB (UME) 2466*32kB (UME) 1256*64kB (UME) 1723*128kB (M) 1245*256kB (M) 842*512kB (UME) 437*1024kB (UME) 2*2048kB (ME) 34*4096kB (M) = 1789428kB
[ 3154.418598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3154.534210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
15:32:09 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:09 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async)
clone(0x8000000, &(0x7f00000001c0)="4de6ae43a1b459957548beaaa7bc76882211bde623050f1e0aec23117b43bdf9aa95ef5d08cccd27eb5ee5d588aa7cba1caf70fef2be5c249bb85ec29120f5f1874e2e115310606a94bb4d", &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000280)="abd15da9acc0cf1ed5c35b5557cb3a0e06e145402cda1292136498caadfc3e490c63565cb355f112a28dcce727343e226a7b75c723f3de8641d049778dd65e") (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3154.695856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3154.967386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
15:32:10 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3155.093789] 82646 total pagecache pages
[ 3155.097875] 0 pages in swap cache
[ 3155.101412] Swap cache stats: add 0, delete 0, find 0/0
[ 3155.107421] Free swap  = 0kB
[ 3155.110531] Total swap = 0kB
[ 3155.113963] 2097051 pages RAM
[ 3155.117148] 0 pages HighMem/MovableOnly
[ 3155.121194] 369649 pages reserved
[ 3155.125169] 0 pages cma reserved
[ 3155.459221] syz-executor.0: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
15:32:10 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3155.569774] syz-executor.2: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3155.588501] syz-executor.3: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3155.841208] syz-executor.1: page allocation failure: order:0, mode:0x6600ca(GFP_HIGHUSER_MOVABLE|__GFP_THISNODE), nodemask=(null)
[ 3156.511642] syz-executor.0 cpuset=/ mems_allowed=0-1
[ 3156.671843] syz-executor.3 cpuset=/ mems_allowed=0-1
[ 3156.735846] syz-executor.2 cpuset=/ mems_allowed=0-1
[ 3157.355770] CPU: 1 PID: 29248 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 3157.363782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3157.373148] Call Trace:
[ 3157.375752]  dump_stack+0x1fc/0x2ef
[ 3157.379400]  warn_alloc.cold+0x7b/0x18f
[ 3157.383400]  ? zone_watermark_ok_safe+0x260/0x260
[ 3157.388259]  ? try_to_free_pages+0x2d7/0x7c0
[ 3157.392686]  ? wait_for_completion_io+0x10/0x10
[ 3157.397376]  __alloc_pages_nodemask+0x232f/0x2890
[ 3157.402238]  ? rcu_nmi_exit+0xb3/0x180
[ 3157.406150]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3157.411036]  alloc_new_node_page+0x2b6/0x400
[ 3157.415457]  migrate_pages+0x528/0x2fe0
[ 3157.419451]  ? mpol_set_nodemask+0x450/0x450
[ 3157.423890]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3157.429442]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3157.434828]  kernel_move_pages+0xde2/0x1820
[ 3157.439175]  ? migrate_pages+0x2fe0/0x2fe0
[ 3157.443426]  ? __se_sys_futex+0x28f/0x3b0
[ 3157.447671]  ? __se_sys_futex+0x298/0x3b0
[ 3157.451838]  ? do_futex+0x1880/0x1880
[ 3157.455656]  __x64_sys_move_pages+0xdd/0x1b0
[ 3157.460079]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3157.464671]  do_syscall_64+0xf9/0x620
[ 3157.468585]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3157.473782] RIP: 0033:0x7f992dec9e99
[ 3157.477505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3157.496950] RSP: 002b:00007f992c83f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3157.504673] RAX: ffffffffffffffda RBX: 00007f992dfdcf60 RCX: 00007f992dec9e99
[ 3157.506512] syz-executor.1 cpuset=/ mems_allowed=0-1
[ 3157.511952] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3157.511962] RBP: 00007f992df23ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3157.511970] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3157.511979] R13: 00007ffd11dfe34f R14: 00007f992c83f300 R15: 0000000000022000
[ 3157.530566] CPU: 1 PID: 29255 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
[ 3157.555812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3157.565174] Call Trace:
[ 3157.567835]  dump_stack+0x1fc/0x2ef
[ 3157.571478]  warn_alloc.cold+0x7b/0x18f
[ 3157.575465]  ? zone_watermark_ok_safe+0x260/0x260
[ 3157.580318]  ? try_to_free_pages+0x2d7/0x7c0
[ 3157.584759]  ? wait_for_completion_io+0x10/0x10
[ 3157.589458]  __alloc_pages_nodemask+0x232f/0x2890
[ 3157.594334]  ? rcu_nmi_exit+0xb3/0x180
[ 3157.598242]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3157.603098]  ? _raw_spin_unlock_irqrestore+0xa3/0xe0
[ 3157.608241]  alloc_new_node_page+0x2b6/0x400
[ 3157.612754]  migrate_pages+0x528/0x2fe0
[ 3157.616829]  ? mpol_set_nodemask+0x450/0x450
[ 3157.621265]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3157.626817]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3157.632201]  kernel_move_pages+0xde2/0x1820
[ 3157.636560]  ? migrate_pages+0x2fe0/0x2fe0
[ 3157.640807]  ? retint_kernel+0x2d/0x2d
[ 3157.644714]  __x64_sys_move_pages+0xdd/0x1b0
[ 3157.649136]  ? do_syscall_64+0x56/0x620
[ 3157.653126]  do_syscall_64+0xf9/0x620
[ 3157.656943]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3157.662135] RIP: 0033:0x7f12f54cce99
[ 3157.665856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3157.684769] RSP: 002b:00007f12f3e42168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3157.692495] RAX: ffffffffffffffda RBX: 00007f12f55dff60 RCX: 00007f12f54cce99
[ 3157.699780] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3157.707062] RBP: 00007f12f5526ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3157.714344] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3157.721622] R13: 00007ffdb64c147f R14: 00007f12f3e42300 R15: 0000000000022000
[ 3158.003886] CPU: 1 PID: 29257 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
[ 3158.011808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3158.021186] Call Trace:
[ 3158.023797]  dump_stack+0x1fc/0x2ef
[ 3158.027442]  warn_alloc.cold+0x7b/0x18f
[ 3158.031435]  ? zone_watermark_ok_safe+0x260/0x260
[ 3158.036294]  ? try_to_free_pages+0x2d7/0x7c0
[ 3158.040726]  ? wait_for_completion_io+0x10/0x10
[ 3158.045422]  __alloc_pages_nodemask+0x232f/0x2890
[ 3158.050284]  ? debug_check_no_obj_freed+0x201/0x490
[ 3158.055323]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3158.060179]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[ 3158.065299]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3158.069923]  alloc_new_node_page+0x2b6/0x400
[ 3158.074344]  migrate_pages+0x528/0x2fe0
[ 3158.078334]  ? mpol_set_nodemask+0x450/0x450
[ 3158.082767]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3158.088316]  ? __bpf_trace_mm_migrate_pages+0x150/0x150
[ 3158.093704]  kernel_move_pages+0xde2/0x1820
[ 3158.098132]  ? migrate_pages+0x2fe0/0x2fe0
[ 3158.102387]  ? __se_sys_futex+0x28f/0x3b0
[ 3158.106541]  ? __se_sys_futex+0x298/0x3b0
[ 3158.110703]  ? do_futex+0x1880/0x1880
[ 3158.114535]  __x64_sys_move_pages+0xdd/0x1b0
[ 3158.118958]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3158.123546]  do_syscall_64+0xf9/0x620
[ 3158.127361]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3158.132561] RIP: 0033:0x7f6a683bfe99
15:32:13 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3158.136283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3158.155195] RSP: 002b:00007f6a66d35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3158.163090] RAX: ffffffffffffffda RBX: 00007f6a684d2f60 RCX: 00007f6a683bfe99
[ 3158.170380] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3158.177663] RBP: 00007f6a68419ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3158.185031] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3158.192312] R13: 00007ffd6f95cb3f R14: 00007f6a66d35300 R15: 0000000000022000
[ 3159.398405] CPU: 1 PID: 29342 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
[ 3159.406320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3159.415683] Call Trace:
[ 3159.418286]  dump_stack+0x1fc/0x2ef
[ 3159.421930]  warn_alloc.cold+0x7b/0x18f
[ 3159.425929]  ? zone_watermark_ok_safe+0x260/0x260
[ 3159.430816]  ? try_to_free_pages+0x2d7/0x7c0
[ 3159.435241]  ? wait_for_completion_io+0x10/0x10
[ 3159.439927]  __alloc_pages_nodemask+0x232f/0x2890
[ 3159.444886]  ? gfp_pfmemalloc_allowed+0x150/0x150
[ 3159.449768]  alloc_new_node_page+0x2b6/0x400
[ 3159.454183]  migrate_pages+0x528/0x2fe0
[ 3159.458169]  ? mpol_set_nodemask+0x450/0x450
[ 3159.462592]  ? migrate_huge_page_move_mapping+0x810/0x810
[ 3159.468138]  ? lock_downgrade+0x720/0x720
[ 3159.472297]  ? lock_acquire+0x170/0x3c0
[ 3159.476279]  ? __might_fault+0xef/0x1d0
[ 3159.480269]  kernel_move_pages+0xde2/0x1820
[ 3159.484606]  ? migrate_pages+0x2fe0/0x2fe0
[ 3159.488849]  ? __se_sys_futex+0x28f/0x3b0
[ 3159.493000]  ? __se_sys_futex+0x298/0x3b0
[ 3159.497160]  ? do_futex+0x1880/0x1880
[ 3159.500972]  __x64_sys_move_pages+0xdd/0x1b0
[ 3159.505388]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 3159.509978]  do_syscall_64+0xf9/0x620
[ 3159.513790]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3159.518981] RIP: 0033:0x7fe0a8319e99
[ 3159.522704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3159.541617] RSP: 002b:00007fe0a6c8f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[ 3159.549329] RAX: ffffffffffffffda RBX: 00007fe0a842cf60 RCX: 00007fe0a8319e99
[ 3159.556713] RDX: 0000000020000200 RSI: 0000000000000356 RDI: 0000000000000000
[ 3159.563989] RBP: 00007fe0a8373ff1 R08: 0000000020000140 R09: 0000000000000000
[ 3159.571263] R10: 000000002026bfec R11: 0000000000000246 R12: 0000000000000000
[ 3159.578536] R13: 00007fff82200b3f R14: 00007fe0a6c8f300 R15: 0000000000022000
15:32:16 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x86, 0x0, 0x0, 0x0, 0x3c43, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
io_setup(0xa, &(0x7f0000000080))
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:32:16 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3162.659800] warn_alloc_show_mem: 4 callbacks suppressed
[ 3162.659807] Mem-Info:
[ 3162.885373] active_anon:248342 inactive_anon:67444 isolated_anon:1384
[ 3162.885373]  active_file:4276 inactive_file:85349 isolated_file:0
[ 3162.885373]  unevictable:0 dirty:212 writeback:0 unstable:0
[ 3162.885373]  slab_reclaimable:136731 slab_unreclaimable:358086
[ 3162.885373]  mapped:76165 shmem:71879 pagetables:63596 bounce:0
[ 3162.885373]  free:321605 free_pcp:649 free_cma:0
[ 3164.078471] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3164.727014] Mem-Info:
[ 3164.730642] active_anon:248925 inactive_anon:67444 isolated_anon:1393
[ 3164.730642]  active_file:4276 inactive_file:85350 isolated_file:0
[ 3164.730642]  unevictable:0 dirty:215 writeback:0 unstable:0
[ 3164.730642]  slab_reclaimable:136730 slab_unreclaimable:369799
[ 3164.730642]  mapped:76171 shmem:71879 pagetables:73571 bounce:0
[ 3164.730642]  free:281940 free_pcp:514 free_cma:0
15:32:20 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3166.225035] Node 0 active_anon:823884kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3166.792747] Node 0 active_anon:823884kB inactive_anon:169508kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211692kB dirty:0kB writeback:0kB shmem:186004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 3166.963025] Node 1 active_anon:172052kB inactive_anon:100268kB active_file:17100kB inactive_file:341404kB unevictable:0kB isolated(anon):1628kB isolated(file):0kB mapped:93548kB dirty:868kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3167.072218] Node 1 active_anon:172952kB inactive_anon:100268kB active_file:17100kB inactive_file:341404kB unevictable:0kB isolated(anon):1628kB isolated(file):0kB mapped:93548kB dirty:868kB writeback:0kB shmem:101512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 3167.179406] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:84kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3167.216523] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3167.221856] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:84kB inactive_anon:20kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3167.259638] Node 0 DMA32 free:37884kB min:35996kB low:44992kB high:53988kB active_anon:823800kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1808kB local_pcp:1404kB free_cma:0kB
[ 3167.549728] lowmem_reserve[]: 0 2693 2695 2695 2695
[ 3167.709024] lowmem_reserve[]: 0 0 1 1 1
[ 3167.819561] Node 0 DMA32 free:35900kB min:35996kB low:44992kB high:53988kB active_anon:823800kB inactive_anon:169488kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:11040kB pagetables:12688kB bounce:0kB free_pcp:1820kB local_pcp:1524kB free_cma:0kB
[ 3168.320577] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3168.708916] cgroup: fork rejected by pids controller in /system.slice/ssh.service
[ 3170.967573] lowmem_reserve[]: 0 0 0 0 0
[ 3171.062987] Node 1 Normal free:767396kB min:53876kB low:67344kB high:80812kB active_anon:175336kB inactive_anon:100264kB active_file:17100kB inactive_file:341412kB unevictable:0kB writepending:72kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:259392kB pagetables:383796kB bounce:0kB free_pcp:868kB local_pcp:432kB free_cma:0kB
[ 3176.068275] lowmem_reserve[]: 0 0 1 1 1
[ 3176.107685] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3176.489023] lowmem_reserve[]: 0 0 0 0 0
[ 3176.499792] Node 0 DMA: 4*4kB (E) 21*8kB (UMH) 8*16kB (UMH) 1*32kB (H) 0*64kB 3*128kB (UM) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB
[ 3176.945910] Node 0 DMA32: 216*4kB (ME) 1747*8kB (UME) 947*16kB (UME) 180*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35752kB
[ 3178.154373] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3178.321863] lowmem_reserve[]: 0 0 0 0 0
[ 3178.326204] Node 1 Normal free:597312kB min:53876kB low:67344kB high:80812kB active_anon:175208kB inactive_anon:100268kB active_file:17100kB inactive_file:341416kB unevictable:0kB writepending:76kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:259360kB pagetables:462752kB bounce:0kB free_pcp:1700kB local_pcp:1268kB free_cma:0kB
[ 3178.357802] Node 1 Normal: 752*4kB (UME) 1172*8kB (UM) 798*16kB (UM) 602*32kB (M) 583*64kB (UM) 1032*128kB (M) 696*256kB (M) 401*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 597312kB
[ 3178.523548] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3178.555924] lowmem_reserve[]: 0 0 0 0 0
[ 3178.561583] Node 0 DMA: 4*4kB (E) 21*8kB (UMH) 8*16kB (UMH) 1*32kB (H) 0*64kB 3*128kB (UM) 2*256kB (ME) 3*512kB (MEH) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10968kB
[ 3178.621846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3178.631675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3178.738674] Node 0 DMA32: 236*4kB (M) 2024*8kB (UME) 1025*16kB (UME) 192*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39808kB
[ 3178.802377] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 3178.820731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3178.850505] 82663 total pagecache pages
[ 3178.857286] Node 1 Normal: 752*4kB (UME) 1368*8kB (UM) 1019*16kB (UM) 602*32kB (M) 583*64kB (UM) 1032*128kB (M) 696*256kB (M) 400*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 601904kB
[ 3178.889207] 0 pages in swap cache
[ 3178.901832] Swap cache stats: add 0, delete 0, find 0/0
[ 3178.917439] Free swap  = 0kB
[ 3178.920477] Total swap = 0kB
[ 3178.951787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3178.982508] 2097051 pages RAM
[ 3178.985642] 0 pages HighMem/MovableOnly
[ 3178.989613] 369649 pages reserved
[ 3179.231786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3179.311750] 0 pages cma reserved
[ 3181.106824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3182.061936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3183.166072] 82666 total pagecache pages
[ 3185.066486] 0 pages in swap cache
[ 3185.070592] Swap cache stats: add 0, delete 0, find 0/0
[ 3185.531436] Free swap  = 0kB
[ 3185.534485] Total swap = 0kB
[ 3185.556590] 2097051 pages RAM
[ 3185.864198] 0 pages HighMem/MovableOnly
[ 3185.868208] 369649 pages reserved
[ 3190.793212] 0 pages cma reserved
15:32:50 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {r0}, {0xee01}, 0x8})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:50 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000080)) (async)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700})
exit(0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x86, 0x0, 0x0, 0x0, 0x3c43, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async, rerun: 32)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async, rerun: 64)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0])
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

15:32:50 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:50 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:50 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:32:50 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3196.879928] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3215.633557] ieee802154 phy0 wpan0: encryption failed: -22
[ 3215.639179] ieee802154 phy1 wpan1: encryption failed: -22
15:33:11 executing program 4:
lseek(0xffffffffffffffff, 0x6, 0x0) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) (async)
io_setup(0x6, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async)
io_getevents(0x0, 0x0, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x3938700}) (async)
exit(0x0) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x86, 0x0, 0x0, 0x0, 0x3c43, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async)
io_setup(0xa, &(0x7f0000000080)) (async)
io_submit(0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000000540)}], 0x0, &(0x7f0000001800)={[{'nbd\x00'}]}) (async)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) (async)
io_submit(0x0, 0x1, &(0x7f0000002a80)=[0x0]) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)

[ 3230.846964] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
15:33:47 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:33:48 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {r0}, {0xee01}, 0x8})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:33:48 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:33:49 executing program 3:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

15:33:50 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3258.632539] IPVS: ftp: loaded support on port[0] = 21
[ 3258.785806] chnl_net:caif_netlink_parms(): no params data found
[ 3258.846300] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3258.853410] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3258.861436] device bridge_slave_0 entered promiscuous mode
[ 3258.869414] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3258.876024] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3258.884748] device bridge_slave_1 entered promiscuous mode
[ 3258.904049] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 3258.913289] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 3258.932596] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 3258.940367] team0: Port device team_slave_0 added
[ 3258.945901] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 3258.953702] team0: Port device team_slave_1 added
[ 3258.971995] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3258.978653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3259.005518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3259.017040] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3259.023461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3259.049235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3259.060340] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 3259.067775] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 3259.094136] device hsr_slave_0 entered promiscuous mode
[ 3259.099918] device hsr_slave_1 entered promiscuous mode
[ 3259.106395] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 3259.113809] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 3259.186025] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3259.192468] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3259.199104] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3259.205449] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3259.247177] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 3259.254024] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3260.491006] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 3260.506361] IPVS: ftp: loaded support on port[0] = 21
[ 3260.516268] IPVS: ftp: loaded support on port[0] = 21
[ 3260.522340] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 3260.522352] 8021q: adding VLAN 0 to HW filter on device team0
[ 3260.535164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3260.538046] IPVS: ftp: loaded support on port[0] = 21
[ 3260.543161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3260.556988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3260.566849] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 3260.591610] IPVS: ftp: loaded support on port[0] = 21
[ 3260.603156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 3260.619776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 3260.634966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3260.643148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3260.661510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 3260.668038] IPVS: ftp: loaded support on port[0] = 21
[ 3260.669280] Bluetooth: hci0: command 0x0409 tx timeout
[ 3261.194607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3261.202975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3261.214954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3261.253391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 3261.288958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3261.296789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3261.325547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 3261.357270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3261.365128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3261.628297] Bluetooth: hci1: command 0x0409 tx timeout
[ 3261.629352] Bluetooth: hci2: command 0x0409 tx timeout
[ 3261.708218] Bluetooth: hci4: command 0x0409 tx timeout
[ 3261.709211] Bluetooth: hci3: command 0x0409 tx timeout
[ 3262.172579] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3262.332418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 3262.358232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3262.366460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3262.388174] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 3262.394229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3262.508229] Bluetooth: hci5: command 0x0409 tx timeout
[ 3262.748220] Bluetooth: hci0: command 0x041b tx timeout
[ 3262.986280] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 3263.103972] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 3263.199778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 3263.206599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 3263.225343] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3263.236307] chnl_net:caif_netlink_parms(): no params data found
[ 3263.273602] chnl_net:caif_netlink_parms(): no params data found
[ 3263.307937] chnl_net:caif_netlink_parms(): no params data found
[ 3263.344537] chnl_net:caif_netlink_parms(): no params data found
[ 3263.370706] chnl_net:caif_netlink_parms(): no params data found
[ 3263.499133] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3263.505587] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3263.513106] device bridge_slave_0 entered promiscuous mode
[ 3263.536241] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 3263.547312] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready
[ 3263.557872] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3263.572325] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3263.585362] device bridge_slave_1 entered promiscuous mode
[ 3263.607072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 3263.617356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 3263.654614] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 3263.703332] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 3263.729509] Bluetooth: hci2: command 0x041b tx timeout
[ 3263.734946] Bluetooth: hci1: command 0x041b tx timeout
[ 3263.750785] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3263.757155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3263.765310] device bridge_slave_0 entered promiscuous mode
[ 3263.785629] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3263.794807] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3263.802528] Bluetooth: hci3: command 0x041b tx timeout
[ 3263.808589] Bluetooth: hci4: command 0x041b tx timeout
[ 3263.814682] device bridge_slave_0 entered promiscuous mode
[ 3263.822614] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3263.830163] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3263.837300] device bridge_slave_0 entered promiscuous mode
[ 3263.846943] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3263.853475] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3263.861443] device bridge_slave_1 entered promiscuous mode
[ 3263.867547] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3263.877339] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3263.885131] device bridge_slave_0 entered promiscuous mode
[ 3263.892999] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3263.900758] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3263.907799] device bridge_slave_1 entered promiscuous mode
[ 3263.929441] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3263.935799] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3263.943925] device bridge_slave_1 entered promiscuous mode
[ 3263.952959] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 3263.960603] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 3263.967294] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 3264.541283] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3264.547653] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3264.555533] device bridge_slave_1 entered promiscuous mode
[ 3264.571908] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 3264.579847] team0: Port device team_slave_0 added
[ 3264.588303] Bluetooth: hci5: command 0x041b tx timeout
[ 3264.625605] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 3264.635067] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[ 3264.656955] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 3264.665198] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 3264.678767] team0: Port device team_slave_1 added
[ 3264.685771] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 3264.696575] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 3264.705736] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 3264.714265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 3264.723316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 3264.731538] device veth0_vlan entered promiscuous mode
[ 3264.739848] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 3264.749347] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 3264.764256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 3264.771545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 3264.797841] device veth1_vlan entered promiscuous mode
[ 3264.804724] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[ 3264.813642] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 3264.828103] Bluetooth: hci0: command 0x040f tx timeout
[ 3265.433021] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[ 3265.457233] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3265.466687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3265.492803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3265.511516] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 3265.523938] team0: Port device team_slave_0 added
[ 3265.531177] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 3265.540492] team0: Port device team_slave_0 added
[ 3265.546984] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 3265.554942] team0: Port device team_slave_1 added
[ 3265.560969] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 3265.568716] team0: Port device team_slave_0 added
[ 3265.574505] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 3265.582877] team0: Port device team_slave_1 added
[ 3265.588651] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 3265.595957] team0: Port device team_slave_0 added
[ 3265.602453] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3265.609017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3265.634399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3265.645309] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 3265.653283] team0: Port device team_slave_1 added
[ 3265.676111] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 3265.684494] team0: Port device team_slave_1 added
[ 3265.690907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 3265.698830] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 3265.712001] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 3265.734236] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 3265.788260] Bluetooth: hci1: command 0x040f tx timeout
[ 3265.793670] Bluetooth: hci2: command 0x040f tx timeout
[ 3265.878076] Bluetooth: hci4: command 0x040f tx timeout
[ 3265.883472] Bluetooth: hci3: command 0x040f tx timeout
[ 3266.332152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 3266.357015] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 3266.365078] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3266.372591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3266.397993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3266.409909] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3266.416153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3266.441442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3266.668158] Bluetooth: hci5: command 0x040f tx timeout
[ 3266.918257] Bluetooth: hci0: command 0x0419 tx timeout
[ 3267.032077] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3267.038564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3267.064181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3267.075509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 3267.088984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 3267.098722] device veth0_macvtap entered promiscuous mode
[ 3267.105320] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 3267.113497] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3267.120201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3267.145870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3267.157410] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3267.164538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3267.190571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3267.201885] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3267.208874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3267.235173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3267.249458] device hsr_slave_0 entered promiscuous mode
[ 3267.255373] device hsr_slave_1 entered promiscuous mode
[ 3267.817330] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3267.823700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3267.850320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3267.864160] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 3267.871805] Bluetooth: hci2: command 0x0419 tx timeout
[ 3267.877155] Bluetooth: hci1: command 0x0419 tx timeout
[ 3267.884366] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 3267.892894] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 3267.900668] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 3267.908846] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3267.915087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3267.940502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3267.950634] Bluetooth: hci3: command 0x0419 tx timeout
[ 3267.955072] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 3267.955957] Bluetooth: hci4: command 0x0419 tx timeout
[ 3267.969272] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 3267.988277] device veth1_macvtap entered promiscuous mode
[ 3268.001764] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 3268.009728] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 3268.017063] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 3268.025091] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 3268.064578] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 3268.094761] device hsr_slave_0 entered promiscuous mode
[ 3268.101641] device hsr_slave_1 entered promiscuous mode
[ 3268.114362] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 3268.139381] device hsr_slave_0 entered promiscuous mode
[ 3268.145750] device hsr_slave_1 entered promiscuous mode
[ 3268.162363] device hsr_slave_0 entered promiscuous mode
[ 3268.169580] device hsr_slave_1 entered promiscuous mode
[ 3268.176050] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 3268.184405] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 3268.206080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 3268.215714] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 3268.225476] device hsr_slave_0 entered promiscuous mode
[ 3268.231804] device hsr_slave_1 entered promiscuous mode
[ 3268.237687] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 3268.250957] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 3268.259221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 3268.287813] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 3268.333650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3268.344458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3268.354696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3268.364925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3268.374583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3268.384722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3268.394220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3268.405398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3268.414591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3268.424377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3268.433582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 3268.443351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3268.453727] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 3268.461131] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3268.468236] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 3268.498109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 3268.506969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 3268.523314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3268.534037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3268.543297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3268.553136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3268.562315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3268.572117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3268.581321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3268.591580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3268.600786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3268.610636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3268.619804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 3268.630127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3268.640748] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 3268.647648] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3268.695379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 3268.706794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 3268.757973] Bluetooth: hci5: command 0x0419 tx timeout
[ 3269.182158] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 3269.447730] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 3269.457406] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 3269.536571] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 3269.547445] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 3269.680411] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3269.699720] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 3269.726558] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3269.754607] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 3269.771354] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 3269.789770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3269.797264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3269.943648] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 3269.962366] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 3269.969660] 8021q: adding VLAN 0 to HW filter on device team0
[ 3269.977490] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 3269.983666] 8021q: adding VLAN 0 to HW filter on device team0
[ 3269.999627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3270.007047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3270.030309] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3270.063628] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 3270.073449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 3270.085550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 3270.095642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 3270.222834] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 3270.229247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3270.236353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3270.245491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3270.256196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3270.264205] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3270.270631] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3270.277707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3270.285909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3270.293717] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3270.300137] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3270.307358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3270.315501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3270.323319] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3270.329746] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3270.339352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 3270.351624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 3270.380270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 3270.509530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3270.518975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3270.526129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3270.534740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3270.543316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3270.552465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3270.561382] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3270.567728] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3270.575467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3270.595349] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3270.604700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 3270.613419] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 3270.622552] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 3270.631945] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3270.641479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 3270.654530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3270.667539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3270.681513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3270.689714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3270.697502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3270.705684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3270.714865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 3270.722936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3270.725262] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 3270.730975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3270.742850] 8021q: adding VLAN 0 to HW filter on device team0
[ 3270.750228] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 3270.759671] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 3270.891980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 3270.899644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3270.906727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 3270.916576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3270.924173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3270.932310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3270.940873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3270.953328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 3270.963894] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 3270.975811] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 3270.982463] 8021q: adding VLAN 0 to HW filter on device team0
[ 3270.991883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 3271.011267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 3271.021035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 3271.035891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 3271.044851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3271.054326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3271.066203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3271.075845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3271.084604] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3271.091040] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3271.102965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 3271.116513] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 3271.137583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 3271.424234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 3271.438618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 3271.446468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3271.465926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 3271.486119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 3271.505769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 3271.528978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 3271.544809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3271.563399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3271.581436] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3271.587897] bridge0: port 1(bridge_slave_0) entered forwarding state
15:34:06 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000"/85], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x0, {r0}, {0xee01}, 0x8})
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3271.596730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 3271.605659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 3271.614873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 3271.627300] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 3271.635848] 8021q: adding VLAN 0 to HW filter on device team0
[ 3271.645863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 3271.676039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 3271.689907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3271.699290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3271.707125] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3271.713563] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3271.723965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 3271.733568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 3271.743797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 3271.753920] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 3271.763713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 3271.788731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 3271.797912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 3271.812137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 3271.821439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 3271.839736] bridge0: port 2(bridge_slave_1) entered blocking state
15:34:06 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3271.846138] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3271.855413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 3271.864701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 3271.883738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 3271.895927] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3271.902396] bridge0: port 1(bridge_slave_0) entered forwarding state
15:34:07 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
munlock(&(0x7f00007c8000/0x3000)=nil, 0x3000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3271.948632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 3271.977114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3271.987159] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3272.015741] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3272.026529] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3272.049694] device bridge_slave_1 left promiscuous mode
[ 3272.055309] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3272.081932] device bridge_slave_0 left promiscuous mode
[ 3272.087472] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3272.116043] batman_adv: batadv0: Interface deactivated: batadv_slave_0
15:34:07 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3272.132931] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3272.146581] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3272.164136] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3272.190282] device bond0 left promiscuous mode
[ 3272.194893] device bond_slave_0 left promiscuous mode
[ 3272.211385] device bond_slave_1 left promiscuous mode
[ 3272.216875] bridge0: port 3(bond0) entered disabled state
[ 3272.225204] device bridge_slave_1 left promiscuous mode
[ 3272.231587] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3272.240111] device bridge_slave_0 left promiscuous mode
[ 3272.245610] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3272.267370] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3272.277420] batman_adv: batadv0: Removing interface: batadv_slave_0
15:34:07 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3272.301468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3272.315182] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3272.329820] device bridge_slave_1 left promiscuous mode
[ 3272.335396] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3272.363127] device bridge_slave_0 left promiscuous mode
[ 3272.378859] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3272.404683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3272.411875] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3272.421809] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3272.430160] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3272.448900] device bridge_slave_1 left promiscuous mode
15:34:07 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
mincore(&(0x7f00007f2000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/202)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c200624ba0f0ff00383a0000000000000000000000000000000000fe6200000000000000000000000000aa030090780000000060af2b080000000000000000000000000000fe8000000000000000000000000000bbcacf090c7111fd000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x8, 0x4, {<r1=>r0}, {0xee01}, 0x8, 0x40})
move_pages(r1, 0x7, &(0x7f0000000240)=[&(0x7f00004bd000/0x2000)=nil, &(0x7f0000905000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f000086a000/0x3000)=nil, &(0x7f0000909000/0x1000)=nil, &(0x7f00001a5000/0x4000)=nil], &(0x7f0000000280)=[0x100], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x6)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1}, 0x20)
move_pages(0x0, 0x356, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0)

[ 3272.454415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3272.472175] device bridge_slave_0 left promiscuous mode
[ 3272.484255] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3272.507179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3272.525510] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3272.537408] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3272.553707] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3272.571585] device bridge_slave_1 left promiscuous mode
[ 3272.577098] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3272.589059] device bridge_slave_0 left promiscuous mode
[ 3272.594606] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3272.607305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3272.614965] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3272.624000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3272.631766] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3272.640947] device bond0 left promiscuous mode
[ 3272.645528] device bond_slave_0 left promiscuous mode
[ 3272.651672] device bond_slave_1 left promiscuous mode
[ 3272.657066] bridge0: port 3(bond0) entered disabled state
[ 3272.664298] device bridge_slave_1 left promiscuous mode
[ 3272.670508] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3272.678523] device bridge_slave_0 left promiscuous mode
[ 3272.683983] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3272.702732] device veth1_macvtap left promiscuous mode
[ 3272.708524] device veth0_macvtap left promiscuous mode
[ 3272.713838] device veth1_vlan left promiscuous mode
[ 3272.724841] device veth0_vlan left promiscuous mode
[ 3272.731401] device veth1_macvtap left promiscuous mode
[ 3272.736737] device veth1_vlan left promiscuous mode
[ 3272.742772] device veth0_vlan left promiscuous mode
[ 3272.749039] device veth1_macvtap left promiscuous mode
[ 3272.754332] device veth0_macvtap left promiscuous mode
[ 3272.761055] device veth1_vlan left promiscuous mode
[ 3272.766120] device veth0_vlan left promiscuous mode
[ 3272.772198] device veth1_macvtap left promiscuous mode
[ 3272.777560] device veth0_macvtap left promiscuous mode
[ 3272.783791] device veth1_vlan left promiscuous mode
[ 3272.789568] device veth0_vlan left promiscuous mode
[ 3272.794969] device veth1_macvtap left promiscuous mode
[ 3272.801048] device veth0_macvtap left promiscuous mode
[ 3272.806590] device veth1_vlan left promiscuous mode
[ 3272.812667] device veth0_vlan left promiscuous mode
[ 3272.819204] device veth1_macvtap left promiscuous mode
[ 3272.824513] device veth0_macvtap left promiscuous mode
[ 3272.833311] device veth1_vlan left promiscuous mode
[ 3272.838593] device veth0_vlan left promiscuous mode
[ 3277.549230] ieee802154 phy0 wpan0: encryption failed: -22
[ 3277.554850] ieee802154 phy1 wpan1: encryption failed: -22
[ 3297.963440] bond3 (unregistering): Released all slaves
[ 3297.972260] bond2 (unregistering): Released all slaves
[ 3297.977755] ------------[ cut here ]------------
[ 3297.982782] WARNING: CPU: 1 PID: 7 at net/core/dev.c:8216 rollback_registered_many.cold+0x171/0x18f
[ 3297.991956] Kernel panic - not syncing: panic_on_warn set ...
[ 3297.991956] 
[ 3297.999315] CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.211-syzkaller #0
[ 3298.006662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3298.016098] Workqueue: netns cleanup_net
[ 3298.020143] Call Trace:
[ 3298.022779]  dump_stack+0x1fc/0x2ef
[ 3298.026393]  panic+0x26a/0x50e
[ 3298.029568]  ? __warn_printk+0xf3/0xf3
[ 3298.033445]  ? rollback_registered_many.cold+0x171/0x18f
[ 3298.038886]  ? __probe_kernel_read+0x130/0x1b0
[ 3298.043449]  ? __warn.cold+0x5/0x5a
[ 3298.047057]  ? __warn+0xe4/0x200
[ 3298.050404]  ? rollback_registered_many.cold+0x171/0x18f
[ 3298.055832]  __warn.cold+0x20/0x5a
[ 3298.059355]  ? rollback_registered_many.cold+0x171/0x18f
[ 3298.064797]  report_bug+0x262/0x2b0
[ 3298.068412]  do_error_trap+0x1d7/0x310
[ 3298.072289]  ? math_error+0x310/0x310
[ 3298.076088]  ? irq_work_claim+0xa6/0xc0
[ 3298.080055]  ? irq_work_queue+0x29/0x80
[ 3298.084018]  ? error_entry+0x72/0xd0
[ 3298.087716]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 3298.092720]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 3298.097550]  invalid_op+0x14/0x20
[ 3298.100994] RIP: 0010:rollback_registered_many.cold+0x171/0x18f
[ 3298.107035] Code: fe e8 95 d6 50 f9 48 c7 c7 c0 85 4c 89 e8 f4 07 e2 ff 0f 0b e9 2b fb 65 fe e8 7d d6 50 f9 48 c7 c7 c0 85 4c 89 e8 dc 07 e2 ff <0f> 0b e9 81 f9 65 fe 48 89 c7 48 89 44 24 08 e8 1d b6 86 f9 48 8b
[ 3298.126028] RSP: 0018:ffff8880b5a47988 EFLAGS: 00010282
[ 3298.131375] RAX: 0000000000000024 RBX: ffff8880472f5e00 RCX: 0000000000000000
[ 3298.138629] RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed1016b48f23
[ 3298.145887] RBP: ffff8880b5a47b60 R08: 0000000000000024 R09: 0000000000000000
[ 3298.153144] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000
[ 3298.160397] R13: 00000000afcad001 R14: ffffffff843ffad0 R15: ffff8880b5a47a50
[ 3298.167705]  ? bond_do_ioctl+0x880/0x880
[ 3298.171839]  ? vprintk_func+0x81/0x180
[ 3298.175712]  ? rollback_registered_many.cold+0x171/0x18f
[ 3298.181143]  ? kernfs_put.part.0+0x1f8/0x590
[ 3298.185533]  ? generic_xdp_install+0x550/0x550
[ 3298.190093]  ? kernfs_put.part.0+0x1f8/0x590
[ 3298.194479]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 3298.199475]  ? kmem_cache_free+0x226/0x260
[ 3298.203780]  ? kernfs_put.part.0+0x225/0x590
[ 3298.208168]  ? kernfs_put+0x42/0x50
[ 3298.211773]  ? sysfs_remove_group+0xc2/0x170
[ 3298.216162]  unregister_netdevice_many.part.0+0x1a/0x300
[ 3298.221596]  default_device_exit_batch+0x2fa/0x3c0
[ 3298.226509]  ? unregister_netdevice_many+0x50/0x50
[ 3298.231415]  ? do_wait_intr_irq+0x270/0x270
[ 3298.235719]  ? cfg802154_switch_netns+0x430/0x430
[ 3298.240542]  ? unregister_netdevice_many+0x50/0x50
[ 3298.245455]  ? dev_change_net_namespace+0xe00/0xe00
[ 3298.250456]  ops_exit_list+0xf9/0x150
[ 3298.254239]  cleanup_net+0x3b4/0x8b0
[ 3298.257938]  ? net_drop_ns+0x90/0x90
[ 3298.261633]  ? check_preemption_disabled+0x10/0x280
[ 3298.266644]  process_one_work+0x864/0x1570
[ 3298.270863]  ? pwq_dec_nr_in_flight+0x2d0/0x2d0
[ 3298.275517]  worker_thread+0x64c/0x1130
[ 3298.279478]  ? process_one_work+0x1570/0x1570
[ 3298.283951]  kthread+0x33f/0x460
[ 3298.287299]  ? kthread_park+0x180/0x180
[ 3298.291252]  ret_from_fork+0x24/0x30
[ 3298.295509] Kernel Offset: disabled
[ 3298.299363] Rebooting in 86400 seconds..