program:
r0 = epoll_create(0x10000e9)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x180000c, 0x13, r3, 0x6a56f000)
r4 = fcntl$dupfd(r3, 0x0, r0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x9000001d})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000480)={0xe000001b})
epoll_pwait2(r0, &(0x7f0000000540)=[{}], 0xfffc, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newneigh={0x3c, 0x1c, 0x2, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x2, 0xc4}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x1}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_VNI={0x8, 0x7, 0xfff}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4890}, 0x0)

[   75.569107][ T4702] Bluetooth: hci0: command tx timeout
[   75.640460][ T5352] ------------[ cut here ]------------
[   75.642940][ T5352] WARNING: CPU: 0 PID: 5352 at fs/exec.c:119 path_noexec+0x1af/0x200
[   75.646434][ T5352] Modules linked in:
[   75.648377][ T5352] CPU: 0 UID: 0 PID: 5352 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[   75.652253][ T5352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   75.656958][ T5352] RIP: 0010:path_noexec+0x1af/0x200
[   75.659340][ T5352] Code: 02 31 ff 48 89 de e8 90 77 88 ff d1 eb eb 07 e8 a7 72 88 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 92 72 88 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[   75.667544][ T5352] RSP: 0018:ffffc9000fc47bd8 EFLAGS: 00010287
[   75.670340][ T5352] RAX: ffffffff823748ae RBX: ffff888041e3cb00 RCX: 0000000000100000
[   75.673682][ T5352] RDX: ffffc9000dbda000 RSI: 000000000000006b RDI: 000000000000006c
[   75.677066][ T5352] RBP: 0000000000080000 R08: ffff888000492440 R09: 0000000000000003
[   75.680639][ T5352] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000013
[   75.684259][ T5352] R13: 1ffff92001f88f90 R14: 0000000000000000 R15: dffffc0000000000
[   75.687737][ T5352] FS:  00007ff1c3ff56c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000
[   75.691546][ T5352] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   75.694239][ T5352] CR2: 00007ff1c7d87190 CR3: 000000003fe00000 CR4: 0000000000352ef0
[   75.697713][ T5352] Call Trace:
[   75.699308][ T5352]  <TASK>
[   75.700651][ T5352]  do_mmap+0xa43/0x10d0
[   75.702517][ T5352]  ? __pfx_do_mmap+0x10/0x10
[   75.704634][ T5352]  ? down_write_killable+0x178/0x230
[   75.707474][ T5352]  ? __pfx_down_write_killable+0x10/0x10
[   75.710474][ T5352]  ? common_file_perm+0x1b5/0x230
[   75.712806][ T5352]  vm_mmap_pgoff+0x2a6/0x4d0
[   75.714825][ T5352]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[   75.717132][ T5352]  ? __fget_files+0x2a/0x420
[   75.719258][ T5352]  ? __fget_files+0x3a0/0x420
[   75.721266][ T5352]  ? __fget_files+0x2a/0x420
[   75.723278][ T5352]  ksys_mmap_pgoff+0x51f/0x760
[   75.725412][ T5352]  do_syscall_64+0xfa/0x3b0
[   75.727546][ T5352]  ? lockdep_hardirqs_on+0x9c/0x150
[   75.730035][ T5352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.732740][ T5352]  ? clear_bhb_loop+0x60/0xb0
[   75.734994][ T5352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.738288][ T5352] RIP: 0033:0x7ff1c7b8ebe9
[   75.740446][ T5352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.749015][ T5352] RSP: 002b:00007ff1c3ff5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   75.753000][ T5352] RAX: ffffffffffffffda RBX: 00007ff1c7db5fa0 RCX: 00007ff1c7b8ebe9
[   75.756661][ T5352] RDX: 000000000180000c RSI: 0000000000004000 RDI: 0000200000ff9000
[   75.760405][ T5352] RBP: 00007ff1c7c11e19 R08: 0000000000000006 R09: 000000006a56f000
[   75.763923][ T5352] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000
[   75.767485][ T5352] R13: 00007ff1c7db6038 R14: 00007ff1c7db5fa0 R15: 00007fff35ccf698
[   75.771287][ T5352]  </TASK>
[   75.772761][ T5352] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   75.776292][ T5352] CPU: 0 UID: 0 PID: 5352 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[   75.780710][ T5352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   75.785510][ T5352] Call Trace:
[   75.787012][ T5352]  <TASK>
[   75.788338][ T5352]  dump_stack_lvl+0x99/0x250
[   75.790376][ T5352]  ? __asan_memcpy+0x40/0x70
[   75.792577][ T5352]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.794642][ T5352]  ? __pfx__printk+0x10/0x10
[   75.796653][ T5352]  vpanic+0x281/0x750
[   75.798494][ T5352]  ? __pfx__printk+0x10/0x10
[   75.800600][ T5352]  ? __pfx_vpanic+0x10/0x10
[   75.802640][ T5352]  ? is_bpf_text_address+0x292/0x2b0
[   75.805035][ T5352]  panic+0xb9/0xc0
[   75.806827][ T5352]  ? __pfx_panic+0x10/0x10
[   75.808844][ T5352]  __warn+0x31b/0x4b0
[   75.810555][ T5352]  ? path_noexec+0x1af/0x200
[   75.812651][ T5352]  ? path_noexec+0x1af/0x200
[   75.814641][ T5352]  report_bug+0x2be/0x4f0
[   75.816541][ T5352]  ? path_noexec+0x1af/0x200
[   75.818561][ T5352]  ? path_noexec+0x1af/0x200
[   75.820619][ T5352]  ? path_noexec+0x1b1/0x200
[   75.822786][ T5352]  handle_bug+0x84/0x160
[   75.824845][ T5352]  exc_invalid_op+0x1a/0x50
[   75.827083][ T5352]  asm_exc_invalid_op+0x1a/0x20
[   75.829348][ T5352] RIP: 0010:path_noexec+0x1af/0x200
[   75.831706][ T5352] Code: 02 31 ff 48 89 de e8 90 77 88 ff d1 eb eb 07 e8 a7 72 88 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 92 72 88 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[   75.840234][ T5352] RSP: 0018:ffffc9000fc47bd8 EFLAGS: 00010287
[   75.842941][ T5352] RAX: ffffffff823748ae RBX: ffff888041e3cb00 RCX: 0000000000100000
[   75.846454][ T5352] RDX: ffffc9000dbda000 RSI: 000000000000006b RDI: 000000000000006c
[   75.850107][ T5352] RBP: 0000000000080000 R08: ffff888000492440 R09: 0000000000000003
[   75.854543][ T5352] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000013
[   75.857867][ T5352] R13: 1ffff92001f88f90 R14: 0000000000000000 R15: dffffc0000000000
[   75.861083][ T5352]  ? path_noexec+0x1ae/0x200
[   75.863059][ T5352]  ? path_noexec+0x1ae/0x200
[   75.865028][ T5352]  do_mmap+0xa43/0x10d0
[   75.866928][ T5352]  ? __pfx_do_mmap+0x10/0x10
[   75.869054][ T5352]  ? down_write_killable+0x178/0x230
[   75.871489][ T5352]  ? __pfx_down_write_killable+0x10/0x10
[   75.874003][ T5352]  ? common_file_perm+0x1b5/0x230
[   75.876261][ T5352]  vm_mmap_pgoff+0x2a6/0x4d0
[   75.878228][ T5352]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[   75.880352][ T5352]  ? __fget_files+0x2a/0x420
[   75.882255][ T5352]  ? __fget_files+0x3a0/0x420
[   75.884427][ T5352]  ? __fget_files+0x2a/0x420
[   75.886603][ T5352]  ksys_mmap_pgoff+0x51f/0x760
[   75.888837][ T5352]  do_syscall_64+0xfa/0x3b0
[   75.890921][ T5352]  ? lockdep_hardirqs_on+0x9c/0x150
[   75.893421][ T5352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.896436][ T5352]  ? clear_bhb_loop+0x60/0xb0
[   75.898588][ T5352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.901187][ T5352] RIP: 0033:0x7ff1c7b8ebe9
[   75.903199][ T5352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.911407][ T5352] RSP: 002b:00007ff1c3ff5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   75.915015][ T5352] RAX: ffffffffffffffda RBX: 00007ff1c7db5fa0 RCX: 00007ff1c7b8ebe9
[   75.918559][ T5352] RDX: 000000000180000c RSI: 0000000000004000 RDI: 0000200000ff9000
[   75.921937][ T5352] RBP: 00007ff1c7c11e19 R08: 0000000000000006 R09: 000000006a56f000
[   75.925250][ T5352] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000
[   75.928553][ T5352] R13: 00007ff1c7db6038 R14: 00007ff1c7db5fa0 R15: 00007fff35ccf698
[   75.931923][ T5352]  </TASK>
[   75.933643][ T5352] Kernel Offset: disabled
[   75.935579][ T5352] Rebooting in 86400 seconds..