Warning: Permanently added '10.128.0.215' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://33371 [ 31.863405][ T4342] cgroup: Unknown subsys name 'net' [ 32.138856][ T4342] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.432744][ T4342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.757889][ T4377] chnl_net:caif_netlink_parms(): no params data found [ 37.776253][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.778278][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.780014][ T4377] device bridge_slave_0 entered promiscuous mode [ 37.782723][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.784021][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.785618][ T4377] device bridge_slave_1 entered promiscuous mode [ 37.792425][ T4377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.794831][ T4377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.801260][ T4377] team0: Port device team_slave_0 added [ 37.803608][ T4377] team0: Port device team_slave_1 added [ 37.810448][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.811599][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.816094][ T4377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.819252][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.820354][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.824479][ T4377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.867293][ T4377] device hsr_slave_0 entered promiscuous mode [ 37.906362][ T4377] device hsr_slave_1 entered promiscuous mode [ 37.991637][ T4377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.009309][ T4377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.038995][ T4377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.097714][ T4377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.183888][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.185233][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.186734][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.187980][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.206551][ T4377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.210791][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.213263][ T1776] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.215556][ T1776] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.221219][ T4377] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.224430][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.226426][ T1776] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.227759][ T1776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.232685][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.234190][ T1776] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.235382][ T1776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.242905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.244641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.248888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.252035][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.255236][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.262681][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.321673][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.323152][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.334236][ T4377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.341922][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.349078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.350906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.352329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.354091][ T4377] device veth0_vlan entered promiscuous mode [ 38.358517][ T4377] device veth1_vlan entered promiscuous mode [ 38.365369][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.367564][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.369238][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.371632][ T4377] device veth0_macvtap entered promiscuous mode [ 38.373939][ T4377] device veth1_macvtap entered promiscuous mode [ 38.380341][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.381689][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.383859][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.388660][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.390304][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.393092][ T4377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.394531][ T4377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.395953][ T4377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.398036][ T4377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.538992][ T4406] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.540414][ T4408] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.541791][ T4408] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.543303][ T4408] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.544640][ T4408] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.546027][ T4408] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.854833][ T1776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.857849][ T1776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.861317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.868442][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.869701][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.871039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.588901][ T1577] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:39 executed programs: 0 [ 39.805415][ T4408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.807052][ T4408] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.808585][ T4406] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.810531][ T4406] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.812028][ T4406] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.813337][ T4406] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.862070][ T4440] chnl_net:caif_netlink_parms(): no params data found [ 39.878088][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.879430][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.880906][ T4440] device bridge_slave_0 entered promiscuous mode [ 39.882931][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.884172][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.885644][ T4440] device bridge_slave_1 entered promiscuous mode [ 39.891927][ T4440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.894508][ T4440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.901643][ T4440] team0: Port device team_slave_0 added [ 39.903405][ T4440] team0: Port device team_slave_1 added [ 39.908801][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.910061][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.914724][ T4440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.919473][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.920643][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.925176][ T4440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.977368][ T4440] device hsr_slave_0 entered promiscuous mode [ 40.016404][ T4440] device hsr_slave_1 entered promiscuous mode [ 40.057143][ T4440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.058407][ T4440] Cannot create hsr debugfs directory [ 41.497696][ T1577] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.836490][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 43.916334][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 44.017045][ T1577] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.098020][ T1577] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.101594][ T4440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.167615][ T4440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.428037][ T4440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.467369][ T4440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.567204][ T4440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.572038][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.573783][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.577088][ T4440] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.579995][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.581758][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.583408][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.584553][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.586142][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.648746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.650441][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.652067][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.653221][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.656035][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.659107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.663021][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.664930][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.666813][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.669599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.671253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.673854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.675479][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.679499][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.681193][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.683518][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.781352][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.782682][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.786875][ T4440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.792515][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.794339][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.800003][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.801564][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.803389][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.804897][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.808967][ T4440] device veth0_vlan entered promiscuous mode [ 45.890477][ T4440] device veth1_vlan entered promiscuous mode [ 45.896894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.898587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.900909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.902361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.904833][ T4440] device veth0_macvtap entered promiscuous mode [ 45.907788][ T4440] device veth1_macvtap entered promiscuous mode [ 45.912982][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.914769][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.917708][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.918958][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.920700][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.922134][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.923768][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.926713][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.928417][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.930526][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.996495][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 45.999579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.001365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.003988][ T4440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.005520][ T4440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.007232][ T4440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.008545][ T4440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.028745][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.031491][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.033434][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.039588][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.041107][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.080663][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.158418][ T4519] FAULT_INJECTION: forcing a failure. [ 46.158418][ T4519] name failslab, interval 1, probability 0, space 0, times 1 [ 46.160622][ T4519] CPU: 1 PID: 4519 Comm: syz.0.17 Not tainted syzkaller #0 [ 46.161763][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 46.163297][ T4519] Call trace: [ 46.163844][ T4519] dump_backtrace+0x1c4/0x1f0 [ 46.164614][ T4519] show_stack+0x2c/0x3c [ 46.165246][ T4519] __dump_stack+0x30/0x40 [ 46.166097][ T4519] dump_stack_lvl+0xf4/0x15c [ 46.166902][ T4519] dump_stack+0x1c/0x5c [ 46.167585][ T4519] should_fail_ex+0x3cc/0x524 [ 46.168396][ T4519] __should_failslab+0xc0/0x11c [ 46.169211][ T4519] should_failslab+0x10/0x28 [ 46.170004][ T4519] __kmem_cache_alloc_node+0x7c/0x318 [ 46.170927][ T4519] __kmalloc+0xc4/0x180 [ 46.171620][ T4519] aa_policy_init+0xd0/0x270 [ 46.172362][ T4519] aa_alloc_profile+0xa8/0x278 [ 46.173172][ T4519] aa_unpack+0xdbc/0x3864 [ 46.173906][ T4519] aa_replace_profiles+0x1ac/0x249c [ 46.174768][ T4519] policy_update+0xe0/0x1ac [ 46.175512][ T4519] profile_replace+0x198/0x304 [ 46.176315][ T4519] vfs_write+0x2a8/0x7c8 [ 46.177033][ T4519] ksys_write+0x12c/0x228 [ 46.177744][ T4519] __arm64_sys_write+0x7c/0x90 [ 46.178542][ T4519] invoke_syscall+0x98/0x290 [ 46.179330][ T4519] el0_svc_common+0x13c/0x258 [ 46.180112][ T4519] do_el0_svc+0x5c/0x134 [ 46.180866][ T4519] el0_svc+0x58/0x128 [ 46.181570][ T4519] el0t_64_sync_handler+0x84/0xf0 [ 46.182426][ T4519] el0t_64_sync+0x18c/0x190 [ 46.184947][ T4519] ------------[ cut here ]------------ [ 46.185880][ T4519] AppArmor WARN aa_policy_destroy: (((!list_empty(&policy->profiles) && (&policy->profiles)->prev != ((void *) 0x122 + (0xdead000000000000UL))))): [ 46.186050][ T4519] WARNING: CPU: 1 PID: 4519 at security/apparmor/lib.c:537 aa_policy_destroy+0x188/0x1e4 [ 46.190047][ T4519] Modules linked in: [ 46.190691][ T4519] CPU: 1 PID: 4519 Comm: syz.0.17 Not tainted syzkaller #0 [ 46.191914][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 46.193580][ T4519] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.194867][ T4519] pc : aa_policy_destroy+0x188/0x1e4 [ 46.195694][ T4519] lr : aa_policy_destroy+0x188/0x1e4 [ 46.196574][ T4519] sp : ffff8000216472d0 [ 46.197241][ T4519] x29: ffff8000216472d0 x28: dfff800000000000 x27: ffff0000d120f91c [ 46.198651][ T4519] x26: ffff0000d120f910 x25: ffff0000d120f910 x24: 0000000000000074 [ 46.200034][ T4519] x23: dfff800000000000 x22: ffff0000d62e6028 x21: dead000000000122 [ 46.201374][ T4519] x20: dfff800000000000 x19: ffff0000d62e6000 x18: 0000000000000000 [ 46.202680][ T4519] x17: 0000000000000000 x16: ffff8000082dd264 x15: 000000000004ffff [ 46.204059][ T4519] x14: 0000000000000001 x13: 1fffe00033e74870 x12: 0000000000000000 [ 46.205492][ T4519] x11: ff0080000a976be0 x10: 0000000000000003 x9 : 7eedf20ce8223b00 [ 46.206902][ T4519] x8 : 7eedf20ce8223b00 x7 : ffff800011c6fd58 x6 : 0000000000000000 [ 46.208235][ T4519] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 46.209522][ T4519] x2 : 0000000000000007 x1 : ffff800011cfdc80 x0 : ffff80018a09a000 [ 46.210933][ T4519] Call trace: [ 46.211549][ T4519] aa_policy_destroy+0x188/0x1e4 [ 46.212406][ T4519] aa_free_profile+0x6c/0x880 [ 46.213160][ T4519] aa_alloc_profile+0x12c/0x278 [ 46.213979][ T4519] aa_unpack+0xdbc/0x3864 [ 46.214733][ T4519] aa_replace_profiles+0x1ac/0x249c [ 46.215602][ T4519] policy_update+0xe0/0x1ac [ 46.216350][ T4519] profile_replace+0x198/0x304 [ 46.217164][ T4519] vfs_write+0x2a8/0x7c8 [ 46.217879][ T4519] ksys_write+0x12c/0x228 [ 46.218551][ T4519] __arm64_sys_write+0x7c/0x90 [ 46.219369][ T4519] invoke_syscall+0x98/0x290 [ 46.220205][ T4519] el0_svc_common+0x13c/0x258 [ 46.221036][ T4519] do_el0_svc+0x5c/0x134 [ 46.221752][ T4519] el0_svc+0x58/0x128 [ 46.222419][ T4519] el0t_64_sync_handler+0x84/0xf0 [ 46.223216][ T4519] el0t_64_sync+0x18c/0x190 [ 46.223976][ T4519] irq event stamp: 2498 [ 46.224666][ T4519] hardirqs last enabled at (2497): [] __schedule+0xeb0/0x1a6c [ 46.226198][ T4519] hardirqs last disabled at (2498): [] el1_dbg+0x24/0x80 [ 46.227581][ T4519] softirqs last enabled at (2470): [] handle_softirqs+0xb1c/0xc90 [ 46.229226][ T4519] softirqs last disabled at (2441): [] __do_softirq+0x14/0x20 [ 46.230755][ T4519] ---[ end trace 0000000000000000 ]--- [ 46.232025][ T4519] ------------[ cut here ]------------ [ 46.232974][ T4519] AppArmor WARN aa_policy_destroy: (((!list_empty(&policy->list) && (&policy->list)->prev != ((void *) 0x122 + (0xdead000000000000UL))))): [ 46.233094][ T4519] WARNING: CPU: 1 PID: 4519 at security/apparmor/lib.c:538 aa_policy_destroy+0x1a8/0x1e4 [ 46.236831][ T4519] Modules linked in: [ 46.237458][ T4519] CPU: 1 PID: 4519 Comm: syz.0.17 Tainted: G W syzkaller #0 [ 46.238857][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 46.240506][ T4519] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.241778][ T4519] pc : aa_policy_destroy+0x1a8/0x1e4 [ 46.242635][ T4519] lr : aa_policy_destroy+0x1a8/0x1e4 [ 46.243505][ T4519] sp : ffff8000216472d0 [ 46.244182][ T4519] x29: ffff8000216472d0 x28: dfff800000000000 x27: ffff0000d120f91c [ 46.245417][ T4519] x26: ffff0000d120f910 x25: ffff0000d120f910 x24: 0000000000000074 [ 46.246713][ T4519] x23: dfff800000000000 x22: ffff0000d62e6018 x21: dead000000000122 [ 46.248080][ T4519] x20: dfff800000000000 x19: ffff0000d62e6000 x18: 0000000000000000 [ 46.249464][ T4519] x17: 6f762828203d2120 x16: ffff8000082dd264 x15: 73696c3e2d796369 [ 46.250871][ T4519] x14: 0000000000000001 x13: 1ffff000042c8da8 x12: 0000000000000000 [ 46.252260][ T4519] x11: ff00800008195f70 x10: 0000000000000000 x9 : 7eedf20ce8223b00 [ 46.253620][ T4519] x8 : 7eedf20ce8223b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 46.254944][ T4519] x5 : ffff800021646d58 x4 : ffff800015484e80 x3 : ffff80000831d370 [ 46.256222][ T4519] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 46.257541][ T4519] Call trace: [ 46.258059][ T4519] aa_policy_destroy+0x1a8/0x1e4 [ 46.258871][ T4519] aa_free_profile+0x6c/0x880 [ 46.259611][ T4519] aa_alloc_profile+0x12c/0x278 [ 46.260338][ T4519] aa_unpack+0xdbc/0x3864 [ 46.261010][ T4519] aa_replace_profiles+0x1ac/0x249c [ 46.261833][ T4519] policy_update+0xe0/0x1ac [ 46.262593][ T4519] profile_replace+0x198/0x304 [ 46.263337][ T4519] vfs_write+0x2a8/0x7c8 [ 46.263996][ T4519] ksys_write+0x12c/0x228 [ 46.264685][ T4519] __arm64_sys_write+0x7c/0x90 [ 46.265462][ T4519] invoke_syscall+0x98/0x290 [ 46.266239][ T4519] el0_svc_common+0x13c/0x258 [ 46.266991][ T4519] do_el0_svc+0x5c/0x134 [ 46.267680][ T4519] el0_svc+0x58/0x128 [ 46.268327][ T4519] el0t_64_sync_handler+0x84/0xf0 [ 46.269130][ T4519] el0t_64_sync+0x18c/0x190 [ 46.269859][ T4519] irq event stamp: 2638 [ 46.270533][ T4519] hardirqs last enabled at (2637): [] __up_console_sem+0xb4/0xfc [ 46.272025][ T4519] hardirqs last disabled at (2638): [] el1_dbg+0x24/0x80 [ 46.273394][ T4519] softirqs last enabled at (2616): [] handle_softirqs+0xb1c/0xc90 [ 46.274905][ T4519] softirqs last disabled at (2501): [] __do_softirq+0x14/0x20 [ 46.276429][ T4519] ---[ end trace 0000000000000000 ]---