program:
r0 = socket$inet(0x10, 0x3, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0}) (async)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x610000, 0x0)
fcntl$setsig(r4, 0x404, 0x21)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x80, 0x6, @link_local}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0) (async)
r7 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x12, r7, 0x0) (async)
fcntl$addseals(r7, 0x409, 0x2)
r8 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000040)={r7, 0x0, 0x0, 0x2000})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400deff1033eaa08b7b0001eb00"/25, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x54}}, 0x0)

[   77.432938][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[   77.435758][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[   77.440570][ T5300] Bluetooth: hci0: command tx timeout
[   77.540465][ T5314] ------------[ cut here ]------------
[   77.543009][ T5314] kernel BUG at mm/hugetlb.c:2360!
[   77.545081][ T5314] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[   77.548297][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[   77.554439][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   77.559003][ T5314] RIP: 0010:alloc_hugetlb_folio_reserve+0xc3/0xd0
[   77.561874][ T5314] Code: e8 e2 1b a4 ff 48 c7 c7 80 66 c1 8d e8 c6 f6 3c 09 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 be 1b a4 ff 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90
[   77.569947][ T5314] RSP: 0018:ffffc9000d4e7830 EFLAGS: 00010093
[   77.572561][ T5314] RAX: ffffffff821bb492 RBX: ffffffff99863468 RCX: ffff88801fcd8000
[   77.575866][ T5314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   77.579120][ T5314] RBP: 0000000000142cc0 R08: ffffea000047002f R09: 1ffffd400008e005
[   77.582215][ T5314] R10: dffffc0000000000 R11: fffff9400008e006 R12: dffffc0000000000
[   77.585690][ T5314] R13: 1ffffffff330c68d R14: ffffea0000470000 R15: 0000000000000000
[   77.589241][ T5314] FS:  00007f7fa1abf6c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000
[   77.592805][ T5314] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.595503][ T5314] CR2: 0000200000000000 CR3: 00000000358e0000 CR4: 0000000000352ef0
[   77.598938][ T5314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   77.602492][ T5314] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   77.606223][ T5314] Call Trace:
[   77.607896][ T5314]  <TASK>
[   77.609431][ T5314]  memfd_alloc_folio+0x1bf/0x380
[   77.611721][ T5314]  memfd_pin_folios+0xe9c/0x13d0
[   77.613961][ T5314]  ? lockdep_unlock+0x89/0x120
[   77.616039][ T5314]  ? __pfx_memfd_pin_folios+0x10/0x10
[   77.618409][ T5314]  ? lockdep_unlock+0x89/0x120
[   77.620461][ T5314]  ? shmem_mapping+0xd/0x50
[   77.622474][ T5314]  ? memfd_fcntl+0x239/0x630
[   77.624498][ T5314]  ? down_read+0x1ad/0x2e0
[   77.626506][ T5314]  udmabuf_create+0x7b5/0xf70
[   77.628644][ T5314]  ? __lock_acquire+0xaac/0xd20
[   77.630896][ T5314]  ? __pfx_udmabuf_create+0x10/0x10
[   77.633146][ T5314]  udmabuf_ioctl+0x1d1/0x2c0
[   77.635124][ T5314]  ? __pfx_udmabuf_ioctl+0x10/0x10
[   77.637311][ T5314]  ? __fget_files+0x3a0/0x420
[   77.639366][ T5314]  ? __fget_files+0x2a/0x420
[   77.641447][ T5314]  ? bpf_lsm_file_ioctl+0x9/0x20
[   77.643611][ T5314]  ? __pfx_udmabuf_ioctl+0x10/0x10
[   77.645925][ T5314]  __se_sys_ioctl+0xf9/0x170
[   77.647993][ T5314]  do_syscall_64+0xf6/0x210
[   77.650048][ T5314]  ? clear_bhb_loop+0x45/0xa0
[   77.652086][ T5314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.654545][ T5314] RIP: 0033:0x7f7fa0b8e969
[   77.656421][ T5314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.664426][ T5314] RSP: 002b:00007f7fa1abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   77.667938][ T5314] RAX: ffffffffffffffda RBX: 00007f7fa0db5fa0 RCX: 00007f7fa0b8e969
[   77.671398][ T5314] RDX: 0000200000000040 RSI: 0000000040187542 RDI: 000000000000000a
[   77.674910][ T5314] RBP: 00007f7fa0c10ab1 R08: 0000000000000000 R09: 0000000000000000
[   77.678435][ T5314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.682018][ T5314] R13: 0000000000000000 R14: 00007f7fa0db5fa0 R15: 00007ffe718d8f28
[   77.685561][ T5314]  </TASK>
[   77.686919][ T5314] Modules linked in:
[   77.688554][ T5314] ---[ end trace 0000000000000000 ]---
[   77.691039][ T5314] RIP: 0010:alloc_hugetlb_folio_reserve+0xc3/0xd0
[   77.693698][ T5314] Code: e8 e2 1b a4 ff 48 c7 c7 80 66 c1 8d e8 c6 f6 3c 09 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 be 1b a4 ff 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90
[   77.702042][ T5314] RSP: 0018:ffffc9000d4e7830 EFLAGS: 00010093
[   77.704724][ T5314] RAX: ffffffff821bb492 RBX: ffffffff99863468 RCX: ffff88801fcd8000
[   77.708197][ T5314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   77.711400][ T5314] RBP: 0000000000142cc0 R08: ffffea000047002f R09: 1ffffd400008e005
[   77.714911][ T5314] R10: dffffc0000000000 R11: fffff9400008e006 R12: dffffc0000000000
[   77.718333][ T5314] R13: 1ffffffff330c68d R14: ffffea0000470000 R15: 0000000000000000
[   77.721725][ T5314] FS:  00007f7fa1abf6c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000
[   77.725808][ T5314] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.728798][ T5314] CR2: 0000200000000000 CR3: 00000000358e0000 CR4: 0000000000352ef0
[   77.732372][ T5314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   77.735766][ T5314] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   77.739074][ T5314] Kernel panic - not syncing: Fatal exception
[   77.742001][ T5314] Kernel Offset: disabled
[   77.743918][ T5314] Rebooting in 86400 seconds..