------------[ cut here ]------------ WARNING: mm/slub.c:7144 at __kvmalloc_node_noprof+0x4d0/0x670 mm/slub.c:7144, CPU#0: syz.0.1959/8806 Modules linked in: CPU: 0 UID: 0 PID: 8806 Comm: syz.0.1959 Not tainted syzkaller #0 PREEMPT Hardware name: linux,dummy-virt (DT) pstate: 21402009 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : __kvmalloc_node_noprof+0x4d0/0x670 mm/slub.c:7144 lr : __kmalloc_large_node_noprof mm/slub.c:5502 [inline] lr : __do_kmalloc_node mm/slub.c:5519 [inline] lr : __kvmalloc_node_noprof+0x4bc/0x670 mm/slub.c:7136 sp : ffff800084ee3bd0 x29: ffff800084ee3c30 x28: fdf0000005a3a200 x27: 0000000000000000 x26: fcf0000009b873c0 x25: 00000000000028c0 x24: 5faf800080c26f9c x23: 0000000000000001 x22: 00000000ffffffff x21: 0000008000000010 x20: 0000000000000cc0 x19: 0000008000000010 x18: 00000000ffffffff x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020001b08 x14: ffff800084ee3a10 x13: ffff800084ee3d18 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 x8 : 0000000080011614 x7 : dead000000000122 x6 : 0000000000000001 x5 : 0000000000000000 x4 : fdf0000005a3a200 x3 : 00000000ffffffff x2 : 00000000ffffffff x1 : 000000007fffffff x0 : 0000000000000000 Call trace: __kvmalloc_node_noprof+0x4d0/0x670 mm/slub.c:7144 (P) init_udmabuf drivers/dma-buf/udmabuf.c:193 [inline] udmabuf_create+0x13c/0x448 drivers/dma-buf/udmabuf.c:386 udmabuf_ioctl_create_list drivers/dma-buf/udmabuf.c:484 [inline] udmabuf_ioctl+0x138/0x17c drivers/dma-buf/udmabuf.c:499 vfs_ioctl fs/ioctl.c:52 [inline] __do_sys_ioctl fs/ioctl.c:598 [inline] __se_sys_ioctl fs/ioctl.c:584 [inline] __arm64_sys_ioctl+0xa8/0x100 fs/ioctl.c:584 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x54/0x108 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:121 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:140 el0_svc+0x38/0x200 arch/arm64/kernel/entry-common.c:797 el0t_64_sync_handler+0xa0/0xe4 arch/arm64/kernel/entry-common.c:816 el0t_64_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:606 ---[ end trace 0000000000000000 ]---