last executing test programs:

669.586126ms ago: executing program 0 (id=40):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
write$P9_RSETATTR(r0, 0x0, 0x0)

482.216017ms ago: executing program 0 (id=42):
r0 = socket$xdp(0x2c, 0x3, 0x0)
fchown(r0, 0x0, 0x0)

482.079007ms ago: executing program 1 (id=43):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5421, &(0x7f0000000300))

398.292258ms ago: executing program 1 (id=44):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0xae40, 0x1}, 0xa9, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x5450, 0x0)

340.362738ms ago: executing program 0 (id=45):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x5451, 0x0)

340.217518ms ago: executing program 1 (id=46):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$TCSBRK(r0, 0x8901, 0x20000000)

260.573149ms ago: executing program 0 (id=47):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
tee(0xffffffffffffffff, r0, 0x0, 0x6)

260.333339ms ago: executing program 1 (id=48):
r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48)

169.466549ms ago: executing program 0 (id=49):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KDGKBLED(r0, 0x5450, 0x0)

88.65134ms ago: executing program 1 (id=50):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
fstat(r0, &(0x7f00000000c0))

161.26µs ago: executing program 0 (id=51):
r0 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000400)={0x1, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0x4000}, {0xffffffffffffffff, 0x0, 0x1000000, 0xfffffffffffff000}]})

0s ago: executing program 1 (id=52):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$P9_ROPEN(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

syzkaller login: [   36.851090][   T28] kauditd_printk_skb: 14 callbacks suppressed
[   36.851240][   T28] audit: type=1400 audit(36.780:89): avc:  denied  { write } for  pid=3090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   37.803236][   T28] audit: type=1400 audit(37.740:90): avc:  denied  { write } for  pid=3094 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   40.699448][   T28] audit: type=1400 audit(40.620:91): avc:  denied  { read write } for  pid=3098 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   40.749389][   T28] audit: type=1400 audit(40.670:92): avc:  denied  { open } for  pid=3098 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
Warning: Permanently added '[localhost]:24080' (ED25519) to the list of known hosts.
[   56.085042][   T28] audit: type=1400 audit(56.010:93): avc:  denied  { name_bind } for  pid=3101 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   57.513660][   T28] audit: type=1400 audit(57.440:94): avc:  denied  { execute } for  pid=3102 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   57.556714][   T28] audit: type=1400 audit(57.490:95): avc:  denied  { execute_no_trans } for  pid=3102 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   60.757245][   T28] audit: type=1400 audit(60.690:96): avc:  denied  { mounton } for  pid=3102 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   60.760660][   T28] audit: type=1400 audit(60.690:97): avc:  denied  { mount } for  pid=3102 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   60.777183][ T3102] cgroup: Unknown subsys name 'net'
[   60.785680][   T28] audit: type=1400 audit(60.720:98): avc:  denied  { unmount } for  pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   60.948855][ T3102] cgroup: Unknown subsys name 'cpuset'
[   60.955598][ T3102] cgroup: Unknown subsys name 'hugetlb'
[   60.956294][ T3102] cgroup: Unknown subsys name 'rlimit'
[   61.117053][   T28] audit: type=1400 audit(61.050:99): avc:  denied  { setattr } for  pid=3102 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   61.119027][   T28] audit: type=1400 audit(61.050:100): avc:  denied  { mounton } for  pid=3102 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   61.120045][   T28] audit: type=1400 audit(61.050:101): avc:  denied  { mount } for  pid=3102 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   61.249377][ T3104] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   61.250462][   T28] audit: type=1400 audit(61.180:102): avc:  denied  { relabelto } for  pid=3104 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   61.257127][   T28] audit: type=1400 audit(61.190:103): avc:  denied  { write } for  pid=3104 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   61.281154][   T28] audit: type=1400 audit(61.210:104): avc:  denied  { read } for  pid=3102 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[   61.286942][   T28] audit: type=1400 audit(61.220:105): avc:  denied  { open } for  pid=3102 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   68.764538][ T3102] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.909915][   T28] audit: type=1400 audit(70.840:106): avc:  denied  { execmem } for  pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   70.974414][   T28] audit: type=1400 audit(70.910:107): avc:  denied  { read } for  pid=3107 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   70.982668][   T28] audit: type=1400 audit(70.910:108): avc:  denied  { open } for  pid=3107 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   70.982849][   T28] audit: type=1400 audit(70.910:109): avc:  denied  { mounton } for  pid=3107 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   71.015491][   T28] audit: type=1400 audit(70.950:111): avc:  denied  { module_request } for  pid=3107 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   71.015644][   T28] audit: type=1400 audit(70.950:110): avc:  denied  { module_request } for  pid=3108 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   71.099970][   T28] audit: type=1400 audit(71.030:112): avc:  denied  { sys_module } for  pid=3107 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   71.773182][   T28] audit: type=1400 audit(71.710:113): avc:  denied  { ioctl } for  pid=3107 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   72.835243][ T3107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.846017][ T3107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.044380][ T3108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.051296][ T3108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.750558][ T3107] hsr_slave_0: entered promiscuous mode
[   73.760445][ T3107] hsr_slave_1: entered promiscuous mode
[   73.986237][ T3108] hsr_slave_0: entered promiscuous mode
[   73.987679][ T3108] hsr_slave_1: entered promiscuous mode
[   73.988492][ T3108] debugfs: 'hsr0' already exists in 'hsr'
[   73.988894][ T3108] Cannot create hsr debugfs directory
[   74.393148][   T28] audit: type=1400 audit(74.320:114): avc:  denied  { create } for  pid=3107 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   74.398582][   T28] audit: type=1400 audit(74.330:115): avc:  denied  { write } for  pid=3107 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   74.420070][ T3107] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.433654][ T3107] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   74.447988][ T3107] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.456025][ T3107] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   74.469797][ T3107] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.482796][ T3107] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   74.483666][ T3108] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.488691][ T3108] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   74.490667][ T3108] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.496756][ T3108] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   74.497239][ T3107] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.505846][ T3107] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   74.509612][ T3108] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.519272][ T3108] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   74.547573][ T3108] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.557398][ T3108] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.305346][ T3108] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.318938][ T3107] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.797969][ T3108] veth0_vlan: entered promiscuous mode
[   77.825064][ T3108] veth1_vlan: entered promiscuous mode
[   77.887773][ T3108] veth0_macvtap: entered promiscuous mode
[   77.906542][ T3108] veth1_macvtap: entered promiscuous mode
[   78.053978][ T2608] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.055068][ T2608] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.055141][ T2608] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.055205][ T2608] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.136482][   T28] kauditd_printk_skb: 1 callbacks suppressed
[   78.136576][   T28] audit: type=1400 audit(78.070:117): avc:  denied  { mount } for  pid=3108 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   78.141267][   T28] audit: type=1400 audit(78.070:118): avc:  denied  { mounton } for  pid=3108 comm="syz-executor" path="/syzkaller.pcqNM0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   78.157331][   T28] audit: type=1400 audit(78.090:119): avc:  denied  { mount } for  pid=3108 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   78.171182][   T28] audit: type=1400 audit(78.100:120): avc:  denied  { mounton } for  pid=3108 comm="syz-executor" path="/syzkaller.pcqNM0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   78.179935][   T28] audit: type=1400 audit(78.110:121): avc:  denied  { mounton } for  pid=3108 comm="syz-executor" path="/syzkaller.pcqNM0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   78.204525][   T28] audit: type=1400 audit(78.140:122): avc:  denied  { unmount } for  pid=3108 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   78.210681][   T28] audit: type=1400 audit(78.140:123): avc:  denied  { mounton } for  pid=3108 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   78.219209][   T28] audit: type=1400 audit(78.150:124): avc:  denied  { mount } for  pid=3108 comm="syz-executor" name="/" dev="gadgetfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   78.234265][   T28] audit: type=1400 audit(78.170:125): avc:  denied  { mount } for  pid=3108 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   78.236671][   T28] audit: type=1400 audit(78.170:126): avc:  denied  { mounton } for  pid=3108 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   78.323480][ T3108] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   78.333024][ T3107] veth0_vlan: entered promiscuous mode
[   78.358547][ T3107] veth1_vlan: entered promiscuous mode
[   78.427317][ T3107] veth0_macvtap: entered promiscuous mode
[   78.438718][ T3107] veth1_macvtap: entered promiscuous mode
[   78.552455][   T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.552553][   T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.552587][   T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.552617][   T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.417745][ T3738] Zero length message leads to an empty skb
[   79.482135][ T3740] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3740 comm=syz.1.15
[   81.349896][ T3818] ------------[ cut here ]------------
[   81.350250][ T3818] WARNING: mm/slub.c:7022 at __kvmalloc_node_noprof+0x3f4/0x530, CPU#0: syz.0.51/3818
[   81.355279][ T3818] Modules linked in:
[   81.358245][ T3818] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   81.359331][ T3818] CPU: 0 UID: 0 PID: 3818 Comm: syz.0.51 Not tainted syzkaller #0 PREEMPT 
[   81.359989][ T3818] Hardware name: ARM-Versatile Express
[   81.360529][ T3818] Call trace: 
[   81.361040][ T3818] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c)
[   81.361974][ T3818]  r7:82a1c4bc r6:00000000 r5:8230865c r4:00000001
[   81.362370][ T3818] [<80201ae4>] (show_stack) from [<8021e838>] (dump_stack_lvl+0x5c/0x70)
[   81.362745][ T3818] [<8021e7dc>] (dump_stack_lvl) from [<8021e864>] (dump_stack+0x18/0x1c)
[   81.363086][ T3818]  r7:82a1c4bc r6:00000000 r5:84fa8000 r4:82c83d7c
[   81.363392][ T3818] [<8021e84c>] (dump_stack) from [<802026b8>] (vpanic+0x114/0x320)
[   81.363892][ T3818] [<802025a4>] (vpanic) from [<802028f8>] (trace_suspend_resume+0x0/0x100)
[   81.364372][ T3818]  r7:805596b8
[   81.364634][ T3818] [<802028c4>] (panic) from [<80251b90>] (get_taint+0x0/0x1c)
[   81.365100][ T3818]  r3:82a0b188 r2:00000001 r1:822ee1cc r0:822f5b50
[   81.365643][ T3818] [<80251b18>] (check_panic_on_warn) from [<80251d0c>] (__warn+0x98/0x1a4)
[   81.366174][ T3818] [<80251c74>] (__warn) from [<80251f90>] (warn_slowpath_fmt+0x178/0x1f4)
[   81.366554][ T3818]  r8:00000009 r7:8232d01c r6:ea81dd74 r5:84fa8000 r4:00000000
[   81.366907][ T3818] [<80251e1c>] (warn_slowpath_fmt) from [<805596b8>] (__kvmalloc_node_noprof+0x3f4/0x530)
[   81.367443][ T3818]  r10:000028c0 r9:ffffffff r8:00000000 r7:00000002 r6:0000000c r5:00000cc0
[   81.367838][ T3818]  r4:ffffffff
[   81.368007][ T3818] [<805592c4>] (__kvmalloc_node_noprof) from [<80c7cdcc>] (udmabuf_create+0x1a0/0x4e8)
[   81.368582][ T3818]  r10:8646fb40 r9:8646f800 r8:838fa500 r7:00000002 r6:0000000c r5:ffffffff
[   81.369098][ T3818]  r4:ffffffff
[   81.369418][ T3818] [<80c7cc2c>] (udmabuf_create) from [<80c7d528>] (udmabuf_ioctl+0x180/0x258)
[   81.369973][ T3818]  r10:84fa8000 r9:00000003 r8:838fa500 r7:20000400 r6:8646fb40 r5:838fa500
[   81.370507][ T3818]  r4:20000400
[   81.370744][ T3818] [<80c7d3a8>] (udmabuf_ioctl) from [<805d0efc>] (sys_ioctl+0x244/0xb5c)
[   81.371294][ T3818]  r6:40087543 r5:838fa501 r4:00000000
[   81.371724][ T3818] [<805d0cb8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c)
[   81.372383][ T3818] Exception stack(0xea81dfa8 to 0xea81dff0)
[   81.372850][ T3818] dfa0:                   00000000 00000000 00000003 40087543 20000400 00000000
[   81.373285][ T3818] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f350dc
[   81.373869][ T3818] dfe0: 76f34e88 76f34e78 00018fb8 00130a70
[   81.374290][ T3818]  r10:00000036 r9:84fa8000 r8:8020029c r7:00000036 r6:00356310 r5:00000000
[   81.374822][ T3818]  r4:00000000
[   81.377947][ T3818] Rebooting in 86400 seconds..