program:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
io_setup(0x401, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r4 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04J\xb7\xcbx\xcd\'\x8eS\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRK\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb3\x8b\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xae\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x10=J^24R\xfc\xd5\xf6\xec\xfcx\xdf\xe0f\x87\x12\xadD\x8b\"\xa0p)\xad\xcf\xd8\xf3\xae\x8a\x03rh\xf9Oms\xb8\xae\xe6\x81\x15\xaf\xce\x97\xe1$\xb0\x942\x05\x8231\xa6\xce\xb53N<<\xae?\x1f^WNBR\xb7\xf4R\x99\x14\xf7\x8a\xcfBm\x93-\x10\xed+\xe1\xe9\xe4$W\xc6\x1dN\xc9\x12[s\x99\xc5\xf7z1\x90\x0f\x03\xc9HJ\xce\xb4\xf4\xac\f\xa4TY\x8a\xdd\x04Lw\xd5\x99+\xad\xdcY)E\xcb\x99\x84U\x83\xce\xc2(m\xe6\x91\xf1\x17.\x9e\xb5\v\f\xf1!A8\xd9\xf6\x92I\x8e\xf7\x03\xf3\xbe\x8e\xb5\xb4W\xe1\x98\xdf\x12V#\x8a<V\xb3\x9b\xd50\xfeg\xfbGH\r:v\xd4\xf2YS\x01q$H\x129:\xd25\xbc\xb4\xeb\xacB\xe8\xf1JE\xae@\xab>p6 \xaf!_\x91U\x96\xf6\xe4\xa0\x18\xd6\xe1v\xeeF\xc7\xc0\x9c\xfa\x16\xa0\fb\xdd\xf8D\x82\"c\xf9A\\\xc9\xd7\x1fv', 0x2)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[   75.488292][ T5312] Bluetooth: hci0: command tx timeout
[   75.594905][ T5332] ------------[ cut here ]------------
[   75.597366][ T5332] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#0: syz.0.0/5332
[   75.601888][ T5332] Modules linked in:
[   75.603813][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[   75.607545][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   75.612472][ T5332] RIP: 0010:path_noexec+0x1af/0x200
[   75.614952][ T5332] Code: 02 31 ff 48 89 de e8 40 e0 84 ff d1 eb eb 07 e8 57 db 84 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 db 84 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[   75.623624][ T5332] RSP: 0018:ffffc9000ec87bd8 EFLAGS: 00010287
[   75.626215][ T5332] RAX: ffffffff823ce6ae RBX: ffff88803fc18780 RCX: 0000000000100000
[   75.629961][ T5332] RDX: ffffc90020d82000 RSI: 000000000000006b RDI: 000000000000006c
[   75.633264][ T5332] RBP: 0000000000080000 R08: ffff88801f948000 R09: 0000000000000003
[   75.636725][ T5332] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011
[   75.640272][ T5332] R13: 1ffff92001d90f90 R14: 0000000000000000 R15: dffffc0000000000
[   75.643837][ T5332] FS:  00007f7e77a626c0(0000) GS:ffff88808d22a000(0000) knlGS:0000000000000000
[   75.647895][ T5332] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   75.650906][ T5332] CR2: 00007f7e76dba190 CR3: 0000000000bdf000 CR4: 0000000000352ef0
[   75.654305][ T5332] Call Trace:
[   75.655810][ T5332]  <TASK>
[   75.657109][ T5332]  do_mmap+0xa43/0x10d0
[   75.658985][ T5332]  ? __pfx_do_mmap+0x10/0x10
[   75.660996][ T5332]  ? down_write_killable+0x178/0x230
[   75.663394][ T5332]  ? __pfx_down_write_killable+0x10/0x10
[   75.665808][ T5332]  ? common_file_perm+0x1b5/0x220
[   75.668035][ T5332]  vm_mmap_pgoff+0x2a6/0x4d0
[   75.670154][ T5332]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[   75.672391][ T5332]  ? __fget_files+0x2a/0x420
[   75.674651][ T5332]  ? __fget_files+0x2a/0x420
[   75.676745][ T5332]  ? __fget_files+0x2a/0x420
[   75.678737][ T5332]  ksys_mmap_pgoff+0x51f/0x760
[   75.681147][ T5332]  do_syscall_64+0xfa/0xf80
[   75.683173][ T5332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.685879][ T5332]  ? clear_bhb_loop+0x60/0xb0
[   75.688015][ T5332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.690549][ T5332] RIP: 0033:0x7f7e76b8f7c9
[   75.692304][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.700269][ T5332] RSP: 002b:00007f7e77a62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   75.703781][ T5332] RAX: ffffffffffffffda RBX: 00007f7e76de5fa0 RCX: 00007f7e76b8f7c9
[   75.707288][ T5332] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000
[   75.710759][ T5332] RBP: 00007f7e76c13f91 R08: 0000000000000008 R09: 0000000000000000
[   75.714092][ T5332] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[   75.717544][ T5332] R13: 00007f7e76de6038 R14: 00007f7e76de5fa0 R15: 00007ffddbbf5bd8
[   75.721885][ T5332]  </TASK>
[   75.723265][ T5332] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   75.726574][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[   75.730555][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   75.735087][ T5332] Call Trace:
[   75.736611][ T5332]  <TASK>
[   75.737940][ T5332]  dump_stack_lvl+0x99/0x250
[   75.740030][ T5332]  ? __asan_memcpy+0x40/0x70
[   75.742048][ T5332]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.744504][ T5332]  ? __pfx__printk+0x10/0x10
[   75.746530][ T5332]  vpanic+0x237/0x6d0
[   75.748351][ T5332]  ? __pfx_vpanic+0x10/0x10
[   75.750337][ T5332]  ? is_bpf_text_address+0x292/0x2b0
[   75.752647][ T5332]  ? is_bpf_text_address+0x26/0x2b0
[   75.754858][ T5332]  panic+0xb9/0xc0
[   75.756506][ T5332]  ? __pfx_panic+0x10/0x10
[   75.758453][ T5332]  __warn+0x317/0x4b0
[   75.760205][ T5332]  ? path_noexec+0x1af/0x200
[   75.762213][ T5332]  ? path_noexec+0x1af/0x200
[   75.764210][ T5332]  __report_bug+0x288/0x500
[   75.766189][ T5332]  ? path_noexec+0x1af/0x200
[   75.768231][ T5332]  ? __pfx___report_bug+0x10/0x10
[   75.770477][ T5332]  ? arch_get_unmapped_area_topdown+0x251/0xbc0
[   75.773153][ T5332]  ? path_noexec+0x1af/0x200
[   75.775298][ T5332]  report_bug+0x16a/0x220
[   75.777236][ T5332]  ? path_noexec+0x1af/0x200
[   75.779418][ T5332]  ? path_noexec+0x1b1/0x200
[   75.781517][ T5332]  handle_bug+0x98/0x200
[   75.783475][ T5332]  exc_invalid_op+0x1a/0x50
[   75.785553][ T5332]  asm_exc_invalid_op+0x1a/0x20
[   75.787748][ T5332] RIP: 0010:path_noexec+0x1af/0x200
[   75.790159][ T5332] Code: 02 31 ff 48 89 de e8 40 e0 84 ff d1 eb eb 07 e8 57 db 84 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 db 84 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[   75.798554][ T5332] RSP: 0018:ffffc9000ec87bd8 EFLAGS: 00010287
[   75.801298][ T5332] RAX: ffffffff823ce6ae RBX: ffff88803fc18780 RCX: 0000000000100000
[   75.804849][ T5332] RDX: ffffc90020d82000 RSI: 000000000000006b RDI: 000000000000006c
[   75.808282][ T5332] RBP: 0000000000080000 R08: ffff88801f948000 R09: 0000000000000003
[   75.811871][ T5332] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011
[   75.815228][ T5332] R13: 1ffff92001d90f90 R14: 0000000000000000 R15: dffffc0000000000
[   75.818620][ T5332]  ? path_noexec+0x1ae/0x200
[   75.820692][ T5332]  ? path_noexec+0x1ae/0x200
[   75.822827][ T5332]  do_mmap+0xa43/0x10d0
[   75.824721][ T5332]  ? __pfx_do_mmap+0x10/0x10
[   75.826772][ T5332]  ? down_write_killable+0x178/0x230
[   75.829039][ T5332]  ? __pfx_down_write_killable+0x10/0x10
[   75.831592][ T5332]  ? common_file_perm+0x1b5/0x220
[   75.833836][ T5332]  vm_mmap_pgoff+0x2a6/0x4d0
[   75.835857][ T5332]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[   75.838059][ T5332]  ? __fget_files+0x2a/0x420
[   75.840227][ T5332]  ? __fget_files+0x2a/0x420
[   75.842281][ T5332]  ? __fget_files+0x2a/0x420
[   75.844309][ T5332]  ksys_mmap_pgoff+0x51f/0x760
[   75.846407][ T5332]  do_syscall_64+0xfa/0xf80
[   75.848438][ T5332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.851015][ T5332]  ? clear_bhb_loop+0x60/0xb0
[   75.853011][ T5332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.855511][ T5332] RIP: 0033:0x7f7e76b8f7c9
[   75.857440][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.865649][ T5332] RSP: 002b:00007f7e77a62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   75.869153][ T5332] RAX: ffffffffffffffda RBX: 00007f7e76de5fa0 RCX: 00007f7e76b8f7c9
[   75.872616][ T5332] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000
[   75.875998][ T5332] RBP: 00007f7e76c13f91 R08: 0000000000000008 R09: 0000000000000000
[   75.879533][ T5332] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[   75.882946][ T5332] R13: 00007f7e76de6038 R14: 00007f7e76de5fa0 R15: 00007ffddbbf5bd8
[   75.886332][ T5332]  </TASK>
[   75.888039][ T5332] Kernel Offset: disabled
[   75.889970][ T5332] Rebooting in 86400 seconds..