program: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1412, 0x200, 0x70bd29, 0x7, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) r1 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r8 = getpid() r9 = syz_open_procfs(r8, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000000080)={0x2020}, 0x2020) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) dup2(r4, r5) r10 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$xdp(r7, &(0x7f0000002240)={&(0x7f00000020c0)={0x2c, 0x1, r12, 0x1a}, 0x10, &(0x7f0000002200)=[{&(0x7f0000002100)="45940db7d04800bc76d2de29032811f1748351fb4b23de654a2e8160fae266e7fbab30e4490ca7737b6dad598d0cd6d967f1f8f70595ec3dd61e26368608", 0x3e}, {&(0x7f0000002140)="11ae07aeb3c69fd3086d2f16cb27974594c70f97ddc730ffb72782106ca9aea715e111ccac308ff31a5c2e4bcba4b2e3eb99cbf9e9771126884cd3c54007410ab4462ada7875d609c35a8a09b07c23159086d30a8c146dfc974e1373370c24f0d8116671176d251a9242d40f61f637d850a9ec5a1b4090cb218f55ccc1c91134193d9e2aa30de0f5bc17fc7dd38791718daa883129ced576af7558850cd557fd021bf04d0ffbc967db86b6ae", 0xac}], 0x2, 0x0, 0x0, 0x4840}, 0x4000004) r13 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000000)={'geneve0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "00eef500c1da9dcc017d0bee258fbe4f0def602c82003dcd7edd914932d7ea16", "54a6328096c1f071951d4c9251aec9d96ae0f4cb2b6097a5db1315d196d7067e", "1b0fa27ca53f4566d3fc789518c2ff35aebbe63eb1cf1203e6c2408bd6fc62cb", "3647eb31d4f5883f01ad4c6e3954e415d9b4fb726a4612e1a8fb2b05d496fce4", "9b0ef7b0202eb3c79cfebfd3af74debccf68b93acd96ef620254d20ee47fd471", "a6bbb689f47a7f9e141f075d", 0x7, 0x40, 0xfffffff0, 0x4, 0xfffffff0}}) ioctl$UDMABUF_CREATE(r10, 0x40187542, &(0x7f0000000040)={r1, 0x1, 0x0, 0x100000}) [ 69.158453][ T4661] Bluetooth: hci0: command tx timeout [ 69.241953][ T5315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.275427][ T5315] ------------[ cut here ]------------ [ 69.277617][ T5315] kernel BUG at mm/hugetlb.c:2403! [ 69.279387][ T5315] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 69.281765][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 69.285296][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.289195][ T5315] RIP: 0010:alloc_hugetlb_folio_reserve+0xbc/0xc0 [ 69.291587][ T5315] Code: 1f eb 05 e8 86 18 a0 ff 48 c7 c7 40 56 61 8e e8 2a 12 cc 09 4c 89 f0 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 65 18 a0 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 69.298657][ T5315] RSP: 0018:ffffc9000d3377f8 EFLAGS: 00010087 [ 69.301201][ T5315] RAX: ffffffff81ff5b7b RBX: 0000000000000000 RCX: 0000000000100000 [ 69.304249][ T5315] RDX: ffffc9000dfe2000 RSI: 0000000000000486 RDI: 0000000000000487 [ 69.307125][ T5315] RBP: 1ffffffff34810d9 R08: ffffffff81ff5b33 R09: 1ffffd4000095005 [ 69.309923][ T5315] R10: dffffc0000000000 R11: fffff94000095006 R12: dffffc0000000000 [ 69.312845][ T5315] R13: dffffc0000000000 R14: ffffea00004a8000 R15: ffffffff9a4086c8 [ 69.315855][ T5315] FS: 00007f1798a0c6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 69.318980][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.321260][ T5315] CR2: 00007f17988ad9b8 CR3: 0000000043c64000 CR4: 0000000000352ef0 [ 69.324080][ T5315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.326914][ T5315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.329801][ T5315] Call Trace: [ 69.331101][ T5315] [ 69.332248][ T5315] ? __die_body+0x5f/0xb0 [ 69.333859][ T5315] ? die+0x9e/0xc0 [ 69.335236][ T5315] ? do_trap+0x15a/0x3a0 [ 69.336776][ T5315] ? alloc_hugetlb_folio_reserve+0xbc/0xc0 [ 69.338950][ T5315] ? do_error_trap+0x1dc/0x2c0 [ 69.340660][ T5315] ? alloc_hugetlb_folio_reserve+0xbc/0xc0 [ 69.342818][ T5315] ? __pfx_do_error_trap+0x10/0x10 [ 69.344683][ T5315] ? report_bug+0x3cd/0x500 [ 69.346481][ T5315] ? handle_invalid_op+0x34/0x40 [ 69.348323][ T5315] ? alloc_hugetlb_folio_reserve+0xbc/0xc0 [ 69.350512][ T5315] ? exc_invalid_op+0x38/0x50 [ 69.352253][ T5315] ? asm_exc_invalid_op+0x1a/0x20 [ 69.354170][ T5315] ? alloc_hugetlb_folio_reserve+0x73/0xc0 [ 69.356360][ T5315] ? alloc_hugetlb_folio_reserve+0xbb/0xc0 [ 69.358448][ T5315] ? alloc_hugetlb_folio_reserve+0xbc/0xc0 [ 69.360695][ T5315] ? alloc_hugetlb_folio_reserve+0xbb/0xc0 [ 69.362871][ T5315] memfd_alloc_folio+0x1bd/0x370 [ 69.364709][ T5315] memfd_pin_folios+0xf10/0x1570 [ 69.366546][ T5315] ? __pfx_memfd_pin_folios+0x10/0x10 [ 69.368534][ T5315] ? __fget_files+0x2a/0x410 [ 69.370230][ T5315] ? __fget_files+0x395/0x410 [ 69.372008][ T5315] ? __fget_files+0x2a/0x410 [ 69.373748][ T5315] udmabuf_create+0x70e/0x10c0 [ 69.375571][ T5315] ? __pfx_udmabuf_create+0x10/0x10 [ 69.377483][ T5315] ? __might_fault+0xc6/0x120 [ 69.379202][ T5315] udmabuf_ioctl+0x301/0x4e0 [ 69.380857][ T5315] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 69.382738][ T5315] ? __fget_files+0x2a/0x410 [ 69.384519][ T5315] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 69.386441][ T5315] __se_sys_ioctl+0xf5/0x170 [ 69.388100][ T5315] do_syscall_64+0xf3/0x230 [ 69.389775][ T5315] ? clear_bhb_loop+0x35/0x90 [ 69.391525][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.393724][ T5315] RIP: 0033:0x7f1797b85d29 [ 69.395356][ T5315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.402307][ T5315] RSP: 002b:00007f1798a0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.405388][ T5315] RAX: ffffffffffffffda RBX: 00007f1797d75fa0 RCX: 00007f1797b85d29 [ 69.408388][ T5315] RDX: 0000000020000040 RSI: 0000000040187542 RDI: 000000000000000c [ 69.411243][ T5315] RBP: 00007f1797c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 69.414167][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.417178][ T5315] R13: 0000000000000000 R14: 00007f1797d75fa0 R15: 00007fffadd4fdc8 [ 69.420097][ T5315] [ 69.421271][ T5315] Modules linked in: [ 69.422745][ T5315] ---[ end trace 0000000000000000 ]--- [ 69.424750][ T5315] RIP: 0010:alloc_hugetlb_folio_reserve+0xbc/0xc0 [ 69.427098][ T5315] Code: 1f eb 05 e8 86 18 a0 ff 48 c7 c7 40 56 61 8e e8 2a 12 cc 09 4c 89 f0 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 65 18 a0 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 69.433848][ T5315] RSP: 0018:ffffc9000d3377f8 EFLAGS: 00010087 [ 69.436243][ T5315] RAX: ffffffff81ff5b7b RBX: 0000000000000000 RCX: 0000000000100000 [ 69.439765][ T5315] RDX: ffffc9000dfe2000 RSI: 0000000000000486 RDI: 0000000000000487 [ 69.443119][ T5315] RBP: 1ffffffff34810d9 R08: ffffffff81ff5b33 R09: 1ffffd4000095005 [ 69.446081][ T5315] R10: dffffc0000000000 R11: fffff94000095006 R12: dffffc0000000000 [ 69.449036][ T5315] R13: dffffc0000000000 R14: ffffea00004a8000 R15: ffffffff9a4086c8 [ 69.452391][ T5315] FS: 00007f1798a0c6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 69.455836][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.458302][ T5315] CR2: 00007f17988ad9b8 CR3: 0000000043c64000 CR4: 0000000000352ef0 [ 69.461120][ T5315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.463975][ T5315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.466854][ T5315] Kernel panic - not syncing: Fatal exception [ 69.469353][ T5315] Kernel Offset: disabled [ 69.470957][ T5315] Rebooting in 86400 seconds..