program: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x40032, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/22, 0x302000, 0x1000, 0xe9, 0x7}, 0x20) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) [ 68.332027][ T5101] Bluetooth: hci0: command tx timeout [ 68.430998][ T5115] ------------[ cut here ]------------ [ 68.433261][ T5115] kernel BUG at mm/page_table_check.c:87! [ 68.435585][ T5115] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 68.438064][ T5115] CPU: 0 UID: 0 PID: 5115 Comm: syz.0.0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 68.441690][ T5115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.445361][ T5115] RIP: 0010:page_table_check_clear+0x3a5/0x550 [ 68.447754][ T5115] Code: 4a fd ff ff e8 2c 5e 89 ff 90 0f 0b e8 24 5e 89 ff 90 0f 0b e8 1c 5e 89 ff 90 0f 0b e8 14 5e 89 ff 90 0f 0b e8 0c 5e 89 ff 90 <0f> 0b f3 0f 1e fa 4c 89 fe 48 81 e6 c0 0f 00 00 31 ff e8 d4 62 89 [ 68.454539][ T5115] RSP: 0018:ffffc9000de0f1a0 EFLAGS: 00010283 [ 68.456870][ T5115] RAX: ffffffff820b79d4 RBX: ffff88801b8c8098 RCX: 0000000000040000 [ 68.460051][ T5115] RDX: ffffc9000b5ca000 RSI: 00000000000011ca RDI: 00000000000011cb [ 68.462888][ T5115] RBP: 00000000ffffffff R08: ffffffff820b78a5 R09: 1ffff11003719013 [ 68.465619][ T5115] R10: dffffc0000000000 R11: ffffed1003719014 R12: ffff88801b8c809c [ 68.468294][ T5115] R13: ffff88801b8c8050 R14: 1ffffffff34881b4 R15: 0000000000000001 [ 68.470588][ T5115] FS: 00007f13bb2c56c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 68.473392][ T5115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.475335][ T5115] CR2: 0000000020000040 CR3: 000000004052e000 CR4: 0000000000352ef0 [ 68.478280][ T5115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.481367][ T5115] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.484330][ T5115] Call Trace: [ 68.485580][ T5115] [ 68.486670][ T5115] ? __die_body+0x5f/0xb0 [ 68.488298][ T5115] ? die+0x9e/0xc0 [ 68.489762][ T5115] ? do_trap+0x15a/0x3a0 [ 68.491384][ T5115] ? page_table_check_clear+0x3a5/0x550 [ 68.493432][ T5115] ? do_error_trap+0x1dc/0x2c0 [ 68.495201][ T5115] ? page_table_check_clear+0x3a5/0x550 [ 68.497278][ T5115] ? __pfx_do_error_trap+0x10/0x10 [ 68.499268][ T5115] ? handle_invalid_op+0x34/0x40 [ 68.501170][ T5115] ? page_table_check_clear+0x3a5/0x550 [ 68.503326][ T5115] ? exc_invalid_op+0x38/0x50 [ 68.505247][ T5115] ? asm_exc_invalid_op+0x1a/0x20 [ 68.507210][ T5115] ? page_table_check_clear+0x275/0x550 [ 68.509639][ T5115] ? page_table_check_clear+0x3a4/0x550 [ 68.511828][ T5115] ? page_table_check_clear+0x3a5/0x550 [ 68.513998][ T5115] zap_huge_pmd+0x940/0xc40 [ 68.515803][ T5115] unmap_page_range+0x762/0x40e0 [ 68.517999][ T5115] ? __pfx_validate_chain+0x10/0x10 [ 68.519990][ T5115] ? __lock_acquire+0x1384/0x2050 [ 68.522144][ T5115] ? __pfx_unmap_page_range+0x10/0x10 [ 68.524545][ T5115] ? __pfx_lock_acquire+0x10/0x10 [ 68.526533][ T5115] ? unmap_vmas+0x1f1/0x5f0 [ 68.528271][ T5115] ? __pfx_lock_release+0x10/0x10 [ 68.530206][ T5115] ? unmap_single_vma+0x1bd/0x2b0 [ 68.532093][ T5115] unmap_vmas+0x3cc/0x5f0 [ 68.533758][ T5115] ? __pfx_unmap_vmas+0x10/0x10 [ 68.535527][ T5115] ? tlb_gather_mmu+0x24e/0x310 [ 68.537266][ T5115] unmap_region+0x214/0x380 [ 68.538932][ T5115] ? __pfx_unmap_region+0x10/0x10 [ 68.540803][ T5115] ? __mas_set_range+0x133/0x3c0 [ 68.542833][ T5115] ? fput+0x1af/0x230 [ 68.544440][ T5115] mmap_region+0x23fa/0x2a30 [ 68.546249][ T5115] ? __pfx_mmap_region+0x10/0x10 [ 68.547970][ T5115] ? futex_wait_queue+0x27/0x1d0 [ 68.549672][ T5115] ? futex_unqueue+0xcb/0xf0 [ 68.551531][ T5115] ? mm_get_unmapped_area+0xa8/0xd0 [ 68.553459][ T5115] ? bpf_lsm_mmap_addr+0x9/0x10 [ 68.555217][ T5115] ? security_mmap_addr+0x6f/0x250 [ 68.557133][ T5115] ? __get_unmapped_area+0x2ed/0x350 [ 68.559177][ T5115] do_mmap+0x8f0/0x1000 [ 68.560738][ T5115] ? __pfx_do_mmap+0x10/0x10 [ 68.562412][ T5115] ? __pfx_down_write_killable+0x10/0x10 [ 68.564557][ T5115] ? rcu_is_watching+0x15/0xb0 [ 68.566480][ T5115] ? apparmor_mmap_file+0xc3/0xe0 [ 68.568316][ T5115] vm_mmap_pgoff+0x1dd/0x3d0 [ 68.570116][ T5115] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 68.572057][ T5115] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.574486][ T5115] ? do_syscall_64+0x100/0x230 [ 68.576424][ T5115] ? ksys_mmap_pgoff+0xdf/0x720 [ 68.578300][ T5115] ? __x64_sys_mmap+0x7f/0x140 [ 68.580159][ T5115] do_syscall_64+0xf3/0x230 [ 68.581909][ T5115] ? clear_bhb_loop+0x35/0x90 [ 68.583760][ T5115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.586063][ T5115] RIP: 0033:0x7f13ba57dff9 [ 68.587842][ T5115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.594842][ T5115] RSP: 002b:00007f13bb2c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 68.597889][ T5115] RAX: ffffffffffffffda RBX: 00007f13ba735f80 RCX: 00007f13ba57dff9 [ 68.600983][ T5115] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 68.603929][ T5115] RBP: 00007f13ba5f0296 R08: ffffffffffffffff R09: 0000000000000000 [ 68.606909][ T5115] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 68.609621][ T5115] R13: 0000000000000000 R14: 00007f13ba735f80 R15: 00007ffdd4fac598 [ 68.612427][ T5115] [ 68.613650][ T5115] Modules linked in: [ 68.615505][ T5115] ---[ end trace 0000000000000000 ]--- [ 68.617624][ T5115] RIP: 0010:page_table_check_clear+0x3a5/0x550 [ 68.619999][ T5115] Code: 4a fd ff ff e8 2c 5e 89 ff 90 0f 0b e8 24 5e 89 ff 90 0f 0b e8 1c 5e 89 ff 90 0f 0b e8 14 5e 89 ff 90 0f 0b e8 0c 5e 89 ff 90 <0f> 0b f3 0f 1e fa 4c 89 fe 48 81 e6 c0 0f 00 00 31 ff e8 d4 62 89 [ 68.627240][ T5115] RSP: 0018:ffffc9000de0f1a0 EFLAGS: 00010283 [ 68.629484][ T5115] RAX: ffffffff820b79d4 RBX: ffff88801b8c8098 RCX: 0000000000040000 [ 68.632601][ T5115] RDX: ffffc9000b5ca000 RSI: 00000000000011ca RDI: 00000000000011cb [ 68.635667][ T5115] RBP: 00000000ffffffff R08: ffffffff820b78a5 R09: 1ffff11003719013 [ 68.638595][ T5115] R10: dffffc0000000000 R11: ffffed1003719014 R12: ffff88801b8c809c [ 68.641553][ T5115] R13: ffff88801b8c8050 R14: 1ffffffff34881b4 R15: 0000000000000001 [ 68.644516][ T5115] FS: 00007f13bb2c56c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 68.647847][ T5115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.650337][ T5115] CR2: 0000000020000040 CR3: 000000004052e000 CR4: 0000000000352ef0 [ 68.653720][ T5115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.657013][ T5115] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.660024][ T5115] Kernel panic - not syncing: Fatal exception [ 68.662632][ T5115] Kernel Offset: disabled [ 68.664151][ T5115] Rebooting in 86400 seconds..