program: bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000500)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1, 0x1, 0x1, 0xc, 0x4, 0x2}, 0x20) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1\xd1\x11\xf0\xc2Gj+kV\x00'/179, 0x2) ftruncate(r4, 0xfbff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b63da78bbd14663, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0x12, 0x93, 0x0, 0x4}, {0x80, 0x80, 0x4, 0x10}, {0x905, 0x5, 0x7, 0x2}, {0x800, 0x3, 0x7f, 0x5}, {0x401, 0x61, 0x4, 0x10500000}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000340)=0x4) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r2, @ANYRESHEX=r6, @ANYRES32, @ANYRESOCT=r3, @ANYRES16=r2, @ANYRESHEX=0x0, @ANYBLOB="d2d0649676530af99b36a9ccb3b4a8ed286f699f98bdfce0d6fda62dd34da038b9243496460071434a9d5fdd1328200fc90d39050b5e062fef044e7bf683b0017dc68b699262cd202f4d505b4f7f86b779bba7da978343e9bb3865a034b6b049ed7ed6e5db729f4fe0e1ccbc343045f48864ea2c1e4b4a74febd47cbb30bedb7f246d3b170e4daa7e7fd1f6ae55cd249ef5d79d1388554102334a9a3b8b72dcb68f5b6695791538b66fce16a79ad", @ANYRESOCT=r1]) [ 75.763691][ T4709] Bluetooth: hci0: command tx timeout [ 75.842853][ T5359] ------------[ cut here ]------------ [ 75.845246][ T5359] WARNING: CPU: 0 PID: 5359 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 75.848496][ T5359] Modules linked in: [ 75.850524][ T5359] CPU: 0 UID: 0 PID: 5359 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.854147][ T5359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.858699][ T5359] RIP: 0010:path_noexec+0x1af/0x200 [ 75.861212][ T5359] Code: 02 31 ff 48 89 de e8 90 77 88 ff d1 eb eb 07 e8 a7 72 88 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 92 72 88 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 75.869272][ T5359] RSP: 0018:ffffc9000d40fbd8 EFLAGS: 00010287 [ 75.871988][ T5359] RAX: ffffffff82374b2e RBX: ffff888042372400 RCX: 0000000000100000 [ 75.875196][ T5359] RDX: ffffc9000e09a000 RSI: 0000000000000064 RDI: 0000000000000065 [ 75.878493][ T5359] RBP: 0000000000080000 R08: ffff888036b62440 R09: 0000000000000003 [ 75.881986][ T5359] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002 [ 75.885481][ T5359] R13: 1ffff92001a81f90 R14: 0000000000000000 R15: dffffc0000000000 [ 75.889001][ T5359] FS: 00007f0453f786c0(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 75.892882][ T5359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.895734][ T5359] CR2: 000020000000f000 CR3: 000000004315d000 CR4: 0000000000352ef0 [ 75.899033][ T5359] Call Trace: [ 75.900616][ T5359] [ 75.901935][ T5359] do_mmap+0xa43/0x10d0 [ 75.903668][ T5359] ? __pfx_do_mmap+0x10/0x10 [ 75.905664][ T5359] ? down_write_killable+0x178/0x230 [ 75.907958][ T5359] ? __pfx_down_write_killable+0x10/0x10 [ 75.910390][ T5359] ? common_file_perm+0x1b5/0x230 [ 75.912454][ T5359] vm_mmap_pgoff+0x2a6/0x4d0 [ 75.914220][ T5359] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 75.916239][ T5359] ? __fget_files+0x2a/0x420 [ 75.918148][ T5359] ? __fget_files+0x3a0/0x420 [ 75.920133][ T5359] ? __fget_files+0x2a/0x420 [ 75.922092][ T5359] ksys_mmap_pgoff+0x51f/0x760 [ 75.924084][ T5359] do_syscall_64+0xfa/0x3b0 [ 75.926056][ T5359] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.928157][ T5359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.930909][ T5359] ? clear_bhb_loop+0x60/0xb0 [ 75.933039][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.935440][ T5359] RIP: 0033:0x7f045318ebe9 [ 75.937377][ T5359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.945729][ T5359] RSP: 002b:00007f0453f78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 75.949267][ T5359] RAX: ffffffffffffffda RBX: 00007f04533c5fa0 RCX: 00007f045318ebe9 [ 75.953202][ T5359] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000000000 [ 75.956336][ T5359] RBP: 00007f0453211e19 R08: 0000000000000007 R09: 0000000000000000 [ 75.959546][ T5359] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 75.963314][ T5359] R13: 00007f04533c6038 R14: 00007f04533c5fa0 R15: 00007fff0762fe68 [ 75.966731][ T5359] [ 75.968045][ T5359] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.971199][ T5359] CPU: 0 UID: 0 PID: 5359 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.975035][ T5359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.979609][ T5359] Call Trace: [ 75.981093][ T5359] [ 75.982375][ T5359] dump_stack_lvl+0x99/0x250 [ 75.984398][ T5359] ? __asan_memcpy+0x40/0x70 [ 75.986339][ T5359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.988529][ T5359] ? __pfx__printk+0x10/0x10 [ 75.990586][ T5359] vpanic+0x281/0x750 [ 75.992374][ T5359] ? __pfx__printk+0x10/0x10 [ 75.994371][ T5359] ? __pfx_vpanic+0x10/0x10 [ 75.996319][ T5359] ? is_bpf_text_address+0x292/0x2b0 [ 75.998607][ T5359] panic+0xb9/0xc0 [ 76.000165][ T5359] ? __pfx_panic+0x10/0x10 [ 76.002094][ T5359] __warn+0x31b/0x4b0 [ 76.003788][ T5359] ? path_noexec+0x1af/0x200 [ 76.005843][ T5359] ? path_noexec+0x1af/0x200 [ 76.007794][ T5359] report_bug+0x2be/0x4f0 [ 76.009700][ T5359] ? path_noexec+0x1af/0x200 [ 76.011889][ T5359] ? path_noexec+0x1af/0x200 [ 76.013976][ T5359] ? path_noexec+0x1b1/0x200 [ 76.016010][ T5359] handle_bug+0x84/0x160 [ 76.017841][ T5359] exc_invalid_op+0x1a/0x50 [ 76.019769][ T5359] asm_exc_invalid_op+0x1a/0x20 [ 76.021862][ T5359] RIP: 0010:path_noexec+0x1af/0x200 [ 76.024151][ T5359] Code: 02 31 ff 48 89 de e8 90 77 88 ff d1 eb eb 07 e8 a7 72 88 ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 92 72 88 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 76.032392][ T5359] RSP: 0018:ffffc9000d40fbd8 EFLAGS: 00010287 [ 76.035052][ T5359] RAX: ffffffff82374b2e RBX: ffff888042372400 RCX: 0000000000100000 [ 76.038357][ T5359] RDX: ffffc9000e09a000 RSI: 0000000000000064 RDI: 0000000000000065 [ 76.041577][ T5359] RBP: 0000000000080000 R08: ffff888036b62440 R09: 0000000000000003 [ 76.044912][ T5359] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002 [ 76.048274][ T5359] R13: 1ffff92001a81f90 R14: 0000000000000000 R15: dffffc0000000000 [ 76.051644][ T5359] ? path_noexec+0x1ae/0x200 [ 76.053796][ T5359] ? path_noexec+0x1ae/0x200 [ 76.055976][ T5359] do_mmap+0xa43/0x10d0 [ 76.057854][ T5359] ? __pfx_do_mmap+0x10/0x10 [ 76.059991][ T5359] ? down_write_killable+0x178/0x230 [ 76.062408][ T5359] ? __pfx_down_write_killable+0x10/0x10 [ 76.064917][ T5359] ? common_file_perm+0x1b5/0x230 [ 76.067088][ T5359] vm_mmap_pgoff+0x2a6/0x4d0 [ 76.069169][ T5359] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 76.071600][ T5359] ? __fget_files+0x2a/0x420 [ 76.073673][ T5359] ? __fget_files+0x3a0/0x420 [ 76.075825][ T5359] ? __fget_files+0x2a/0x420 [ 76.077888][ T5359] ksys_mmap_pgoff+0x51f/0x760 [ 76.079987][ T5359] do_syscall_64+0xfa/0x3b0 [ 76.082074][ T5359] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.084370][ T5359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.087099][ T5359] ? clear_bhb_loop+0x60/0xb0 [ 76.089235][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.091781][ T5359] RIP: 0033:0x7f045318ebe9 [ 76.093395][ T5359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.101888][ T5359] RSP: 002b:00007f0453f78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 76.105180][ T5359] RAX: ffffffffffffffda RBX: 00007f04533c5fa0 RCX: 00007f045318ebe9 [ 76.108319][ T5359] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000000000 [ 76.111670][ T5359] RBP: 00007f0453211e19 R08: 0000000000000007 R09: 0000000000000000 [ 76.114616][ T5359] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 76.117896][ T5359] R13: 00007f04533c6038 R14: 00007f04533c5fa0 R15: 00007fff0762fe68 [ 76.121346][ T5359] [ 76.122942][ T5359] Kernel Offset: disabled [ 76.124606][ T5359] Rebooting in 86400 seconds..