program:
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000003, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x40000000000000, 0x400, 0x1, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x200242})
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r5, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
[ 84.942932][ T4663] Bluetooth: hci0: command tx timeout
[ 85.021413][ T5339] ------------[ cut here ]------------
[ 85.024419][ T5339] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002)
[ 85.024433][ T5339] WARNING: fs/exec.c:119 at path_noexec+0x1b0/0x200, CPU#0: syz.0.0/5339
[ 85.032844][ T5339] Modules linked in:
[ 85.035422][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.039310][ T5339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.044285][ T5339] RIP: 0010:path_noexec+0x1b0/0x200
[ 85.046399][ T5339] Code: 31 ff 48 89 de e8 40 eb 7f ff 48 89 d8 d1 e8 eb 07 e8 54 e6 7f ff b0 01 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 41 e6 7f ff 90 <0f> 0b 90 e9 47 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a5
[ 85.054862][ T5339] RSP: 0018:ffffc900048dfbd8 EFLAGS: 00010287
[ 85.057477][ T5339] RAX: ffffffff82456aef RBX: ffff8880124905c0 RCX: 0000000000100000
[ 85.060911][ T5339] RDX: ffffc9000f162000 RSI: 0000000000000068 RDI: 0000000000000069
[ 85.064397][ T5339] RBP: 0000000000080000 R08: ffff888030efca80 R09: 0000000000000003
[ 85.067839][ T5339] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001
[ 85.071374][ T5339] R13: 1ffff9200091bf90 R14: 0000000000000000 R15: dffffc0000000000
[ 85.075026][ T5339] FS: 00007f6f7d0956c0(0000) GS:ffff88808c8ae000(0000) knlGS:0000000000000000
[ 85.078961][ T5339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.081938][ T5339] CR2: 00007f6f7c408d00 CR3: 0000000039138000 CR4: 0000000000352ef0
[ 85.085396][ T5339] Call Trace:
[ 85.086866][ T5339]
[ 85.088161][ T5339] do_mmap+0xa34/0x10c0
[ 85.090108][ T5339] ? __pfx_do_mmap+0x10/0x10
[ 85.092267][ T5339] ? down_write_killable+0x180/0x240
[ 85.094630][ T5339] ? __pfx_down_write_killable+0x10/0x10
[ 85.097127][ T5339] ? apparmor_mmap_file+0x2da/0x3e0
[ 85.099558][ T5339] vm_mmap_pgoff+0x272/0x4e0
[ 85.101776][ T5339] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 85.104006][ T5339] ? __fget_files+0x2a/0x420
[ 85.106059][ T5339] ? __fget_files+0x3a2/0x420
[ 85.108158][ T5339] ? __fget_files+0x2a/0x420
[ 85.110599][ T5339] ksys_mmap_pgoff+0x4dc/0x760
[ 85.112991][ T5339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.115566][ T5339] do_syscall_64+0x174/0x580
[ 85.117443][ T5339] ? clear_bhb_loop+0x40/0x90
[ 85.119247][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.121525][ T5339] RIP: 0033:0x7f6f7c19ce59
[ 85.123221][ T5339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.131037][ T5339] RSP: 002b:00007f6f7d094fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 85.134688][ T5339] RAX: ffffffffffffffda RBX: 00007f6f7c415fa0 RCX: 00007f6f7c19ce59
[ 85.138169][ T5339] RDX: 000000000300000f RSI: 0000000000003000 RDI: 0000200000000000
[ 85.141600][ T5339] RBP: 00007f6f7c232d6f R08: 0000000000000008 R09: 0000000000000000
[ 85.145116][ T5339] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[ 85.148471][ T5339] R13: 00007f6f7c416038 R14: 00007f6f7c415fa0 R15: 00007ffd22df0798
[ 85.151998][ T5339]
[ 85.153391][ T5339] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 85.156554][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.160393][ T5339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.164619][ T5339] Call Trace:
[ 85.166101][ T5339]
[ 85.167355][ T5339] vpanic+0x56c/0xa60
[ 85.169029][ T5339] ? __pfx__printk+0x10/0x10
[ 85.171127][ T5339] ? __pfx_vpanic+0x10/0x10
[ 85.173172][ T5339] ? is_bpf_text_address+0x292/0x2b0
[ 85.175411][ T5339] ? is_bpf_text_address+0x26/0x2b0
[ 85.177653][ T5339] panic+0xc5/0xd0
[ 85.179241][ T5339] ? __pfx_panic+0x10/0x10
[ 85.181211][ T5339] __warn+0x315/0x4c0
[ 85.182898][ T5339] ? path_noexec+0x1b0/0x200
[ 85.184764][ T5339] ? path_noexec+0x1b0/0x200
[ 85.186631][ T5339] __report_bug+0x28e/0x530
[ 85.188584][ T5339] ? path_noexec+0x1b0/0x200
[ 85.190567][ T5339] ? __pfx___report_bug+0x10/0x10
[ 85.192735][ T5339] ? arch_get_unmapped_area_topdown+0x269/0xb50
[ 85.195389][ T5339] ? path_noexec+0x1b0/0x200
[ 85.197468][ T5339] report_bug+0x16a/0x220
[ 85.199393][ T5339] ? path_noexec+0x1b0/0x200
[ 85.201445][ T5339] ? path_noexec+0x1b2/0x200
[ 85.203472][ T5339] handle_bug+0x9c/0x200
[ 85.205374][ T5339] exc_invalid_op+0x1a/0x50
[ 85.207331][ T5339] asm_exc_invalid_op+0x1a/0x20
[ 85.209331][ T5339] RIP: 0010:path_noexec+0x1b0/0x200
[ 85.211635][ T5339] Code: 31 ff 48 89 de e8 40 eb 7f ff 48 89 d8 d1 e8 eb 07 e8 54 e6 7f ff b0 01 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 41 e6 7f ff 90 <0f> 0b 90 e9 47 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a5
[ 85.219911][ T5339] RSP: 0018:ffffc900048dfbd8 EFLAGS: 00010287
[ 85.222482][ T5339] RAX: ffffffff82456aef RBX: ffff8880124905c0 RCX: 0000000000100000
[ 85.225779][ T5339] RDX: ffffc9000f162000 RSI: 0000000000000068 RDI: 0000000000000069
[ 85.229099][ T5339] RBP: 0000000000080000 R08: ffff888030efca80 R09: 0000000000000003
[ 85.232489][ T5339] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001
[ 85.235718][ T5339] R13: 1ffff9200091bf90 R14: 0000000000000000 R15: dffffc0000000000
[ 85.238941][ T5339] ? path_noexec+0x1af/0x200
[ 85.240981][ T5339] ? path_noexec+0x1af/0x200
[ 85.242919][ T5339] do_mmap+0xa34/0x10c0
[ 85.244746][ T5339] ? __pfx_do_mmap+0x10/0x10
[ 85.246766][ T5339] ? down_write_killable+0x180/0x240
[ 85.249049][ T5339] ? __pfx_down_write_killable+0x10/0x10
[ 85.251336][ T5339] ? apparmor_mmap_file+0x2da/0x3e0
[ 85.253453][ T5339] vm_mmap_pgoff+0x272/0x4e0
[ 85.255504][ T5339] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 85.257673][ T5339] ? __fget_files+0x2a/0x420
[ 85.259646][ T5339] ? __fget_files+0x3a2/0x420
[ 85.261555][ T5339] ? __fget_files+0x2a/0x420
[ 85.263426][ T5339] ksys_mmap_pgoff+0x4dc/0x760
[ 85.265459][ T5339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.267936][ T5339] do_syscall_64+0x174/0x580
[ 85.269837][ T5339] ? clear_bhb_loop+0x40/0x90
[ 85.271630][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.273847][ T5339] RIP: 0033:0x7f6f7c19ce59
[ 85.275537][ T5339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.283322][ T5339] RSP: 002b:00007f6f7d094fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 85.286609][ T5339] RAX: ffffffffffffffda RBX: 00007f6f7c415fa0 RCX: 00007f6f7c19ce59
[ 85.289738][ T5339] RDX: 000000000300000f RSI: 0000000000003000 RDI: 0000200000000000
[ 85.293077][ T5339] RBP: 00007f6f7c232d6f R08: 0000000000000008 R09: 0000000000000000
[ 85.296581][ T5339] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[ 85.299932][ T5339] R13: 00007f6f7c416038 R14: 00007f6f7c415fa0 R15: 00007ffd22df0798
[ 85.303317][ T5339]
[ 85.305057][ T5339] Kernel Offset: disabled
[ 85.306973][ T5339] Rebooting in 86400 seconds..