no interfaces have a carrier
[ 43.369194][ T3853] 8021q: adding VLAN 0 to HW filter on device bond0
[ 43.378968][ T3853] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts.
2026/08/22 01:04:49 parsed 1 programs
2026/08/22 01:04:49 serving rpc on tcp://37873
syzkaller login: [ 70.429473][ T4199] cgroup: Unknown subsys name 'net'
[ 70.569214][ T4199] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 71.305410][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.311964][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.074590][ T4199] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 74.457506][ T4247] chnl_net:caif_netlink_parms(): no params data found
[ 74.531895][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.539965][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.549679][ T4247] device bridge_slave_0 entered promiscuous mode
[ 74.559581][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.568020][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.576377][ T4247] device bridge_slave_1 entered promiscuous mode
[ 74.612775][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 74.626631][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 74.656173][ T4247] team0: Port device team_slave_0 added
[ 74.668216][ T4247] team0: Port device team_slave_1 added
[ 74.691963][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 74.698993][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.726363][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 74.739977][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 74.747431][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.773646][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 74.813049][ T4247] device hsr_slave_0 entered promiscuous mode
[ 74.820052][ T4247] device hsr_slave_1 entered promiscuous mode
[ 74.956079][ T4247] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 74.967791][ T4247] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 74.979341][ T4247] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 74.990848][ T4247] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.076164][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.093316][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 75.106431][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 75.114797][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 75.127232][ T4247] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.139815][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 75.149973][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 75.159575][ T157] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.166909][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.188096][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 75.196727][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 75.205745][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 75.216212][ T157] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.223354][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.248106][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 75.257143][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 75.277435][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 75.286687][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 75.296575][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 75.309171][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 75.436899][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 75.445717][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 75.459736][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.481196][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 75.505215][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 75.515457][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 75.525037][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 75.537442][ T4247] device veth0_vlan entered promiscuous mode
[ 75.553362][ T4247] device veth1_vlan entered promiscuous mode
[ 75.578581][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 75.587513][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 75.596573][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 75.608476][ T4247] device veth0_macvtap entered promiscuous mode
[ 75.620921][ T4247] device veth1_macvtap entered promiscuous mode
[ 75.638796][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.647692][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 75.658036][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 75.671098][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.680142][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 75.690561][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 75.704576][ T4247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.715313][ T4247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.724706][ T4247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.734725][ T4247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.816927][ T3077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.828683][ T3077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.847880][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 76.879721][ T3077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.888089][ T3077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.897372][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/08/22 01:04:59 executed programs: 0
[ 77.875152][ T4297] chnl_net:caif_netlink_parms(): no params data found
[ 77.933771][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.940965][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.949429][ T4297] device bridge_slave_0 entered promiscuous mode
[ 77.959070][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.966398][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.974595][ T4297] device bridge_slave_1 entered promiscuous mode
[ 77.999064][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.010899][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 78.038809][ T4297] team0: Port device team_slave_0 added
[ 78.046916][ T4297] team0: Port device team_slave_1 added
[ 78.069371][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.076435][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.102595][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 78.115124][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 78.122101][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.148379][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.184802][ T4297] device hsr_slave_0 entered promiscuous mode
[ 78.192890][ T4297] device hsr_slave_1 entered promiscuous mode
[ 78.199569][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 78.207562][ T4297] Cannot create hsr debugfs directory
[ 78.300594][ T4297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.783253][ T4268] Bluetooth: hci0: command 0x0409 tx timeout
[ 81.329162][ T4297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.407489][ T4297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.521263][ T4297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.628140][ T4297] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 81.640245][ T4297] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 81.656470][ T4297] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 81.666100][ T4297] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 81.730737][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0
[ 81.767687][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 81.775785][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 81.787051][ T4297] 8021q: adding VLAN 0 to HW filter on device team0
[ 81.801381][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 81.810904][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 81.819888][ T157] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.827019][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.837518][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 81.846455][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 81.854998][ T157] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.862062][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.869607][ T4266] Bluetooth: hci0: command 0x041b tx timeout
[ 81.876770][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 81.884979][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 81.915386][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 81.926972][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 81.936978][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 81.945959][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 81.959750][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 81.968449][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 81.999508][ T4297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 82.010104][ T4297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 82.026324][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 82.035196][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 82.043914][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 82.053477][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 82.062112][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 82.195119][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 82.203175][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 82.220922][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 82.246600][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 82.255591][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 82.282567][ T4297] device veth0_vlan entered promiscuous mode
[ 82.288992][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 82.300623][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 82.312124][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 82.320151][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 82.335648][ T154] device hsr_slave_0 left promiscuous mode
[ 82.342851][ T154] device hsr_slave_1 left promiscuous mode
[ 82.349251][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 82.357404][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 82.366942][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 82.374463][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 82.382101][ T154] device bridge_slave_1 left promiscuous mode
[ 82.389466][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.403143][ T154] device bridge_slave_0 left promiscuous mode
[ 82.409375][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.427141][ T154] device veth1_macvtap left promiscuous mode
[ 82.433733][ T154] device veth0_macvtap left promiscuous mode
[ 82.439801][ T154] device veth1_vlan left promiscuous mode
[ 82.445843][ T154] device veth0_vlan left promiscuous mode
[ 82.618909][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 82.631664][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 82.647261][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 82.663044][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 82.724559][ T154] bond0 (unregistering): Released all slaves
[ 82.777307][ T4297] device veth1_vlan entered promiscuous mode
[ 82.788561][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 82.810469][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 82.819429][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 82.830338][ T4297] device veth0_macvtap entered promiscuous mode
[ 82.854866][ T4297] device veth1_macvtap entered promiscuous mode
[ 82.874095][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 82.881483][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 82.890167][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 82.898708][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 82.907635][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 82.921219][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 82.930508][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 82.939951][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 82.953150][ T4297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.961856][ T4297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.971887][ T4297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.981548][ T4297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.032118][ T3077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.040446][ T3077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.064982][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 83.090870][ T3050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.099256][ T3050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.109662][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 83.148488][ T4320] FAULT_INJECTION: forcing a failure.
[ 83.148488][ T4320] name failslab, interval 1, probability 0, space 0, times 1
[ 83.164305][ T4320] CPU: 1 PID: 4320 Comm: syz.0.17 Not tainted syzkaller #0
[ 83.171554][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 83.181625][ T4320] Call Trace:
[ 83.184909][ T4320]
[ 83.187837][ T4320] dump_stack_lvl+0x188/0x250
[ 83.192553][ T4320] ? show_regs_print_info+0x20/0x20
[ 83.197774][ T4320] ? load_image+0x410/0x410
[ 83.202298][ T4320] ? __might_sleep+0xf0/0xf0
[ 83.206889][ T4320] ? __lock_acquire+0x7b50/0x7b50
[ 83.211922][ T4320] should_fail+0x383/0x4b0
[ 83.216342][ T4320] should_failslab+0x5/0x20
[ 83.220847][ T4320] slab_pre_alloc_hook+0x51/0xc0
[ 83.225816][ T4320] __kmalloc+0x6b/0x340
[ 83.229998][ T4320] ? aa_policy_init+0xb4/0x260
[ 83.234782][ T4320] aa_policy_init+0xb4/0x260
[ 83.239375][ T4320] aa_alloc_profile+0x9a/0x270
[ 83.244138][ T4320] aa_unpack+0x1214/0x4e30
[ 83.248569][ T4320] ? aa_load_ent_alloc+0xa0/0xa0
[ 83.253514][ T4320] ? finish_lock_switch+0x12d/0x290
[ 83.258740][ T4320] ? lockdep_hardirqs_on+0x94/0x140
[ 83.263955][ T4320] ? finish_lock_switch+0x12d/0x290
[ 83.269166][ T4320] ? __schedule+0x11cb/0x4350
[ 83.273848][ T4320] ? add_chain_block+0x9b0/0x9b0
[ 83.278836][ T4320] aa_replace_profiles+0x20f/0x2ac0
[ 83.284168][ T4320] ? aa_may_manage_policy+0x7a0/0x7a0
[ 83.289551][ T4320] ? mark_lock+0x94/0x320
[ 83.293884][ T4320] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 83.299869][ T4320] ? lock_chain_count+0x20/0x20
[ 83.304742][ T4320] ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 83.310400][ T4320] ? lockdep_hardirqs_on+0x94/0x140
[ 83.315644][ T4320] ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 83.321313][ T4320] ? __might_fault+0xb7/0x110
[ 83.326004][ T4320] ? __lock_acquire+0x7b50/0x7b50
[ 83.331090][ T4320] ? _copy_from_user+0x111/0x170
[ 83.336058][ T4320] ? aa_simple_write_to_buffer+0x163/0x1e0
[ 83.341922][ T4320] policy_update+0xce/0x160
[ 83.346434][ T4320] profile_replace+0x1ca/0x320
[ 83.351200][ T4320] ? aa_simple_write_to_buffer+0x1e0/0x1e0
[ 83.357025][ T4320] vfs_write+0x304/0xd70
[ 83.361288][ T4320] ? lockdep_hardirqs_on+0x94/0x140
[ 83.366526][ T4320] ? file_end_write+0x250/0x250
[ 83.371384][ T4320] ? __context_tracking_exit+0x4c/0x80
[ 83.376866][ T4320] ? __fdget_pos+0x2c6/0x370
[ 83.381484][ T4320] ksys_write+0x153/0x260
[ 83.385816][ T4320] ? __ia32_sys_read+0x80/0x80
[ 83.390583][ T4320] ? lockdep_hardirqs_on+0x94/0x140
[ 83.395795][ T4320] do_syscall_64+0x4c/0xa0
[ 83.400239][ T4320] ? clear_bhb_loop+0x30/0x80
[ 83.404916][ T4320] ? clear_bhb_loop+0x30/0x80
[ 83.409598][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.415502][ T4320] RIP: 0033:0x7f91d0cd90d9
[ 83.419936][ T4320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 83.439549][ T4320] RSP: 002b:00007ffd10d50fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 83.448027][ T4320] RAX: ffffffffffffffda RBX: 00007f91d0f60fa0 RCX: 00007f91d0cd90d9
[ 83.456011][ T4320] RDX: 000000000000004d RSI: 0000200000000300 RDI: 0000000000000003
[ 83.463979][ T4320] RBP: 00007ffd10d51050 R08: 0000000000000000 R09: 0000000000000000
[ 83.471949][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 83.479920][ T4320] R13: 00007f91d0f60fac R14: 00007f91d0f60fa0 R15: 00007f91d0f60fa0
[ 83.487910][ T4320]
[ 83.499568][ T4320] ------------[ cut here ]------------
[ 83.505111][ T4320] AppArmor WARN aa_policy_destroy: (((!list_empty(&policy->profiles) && (&policy->profiles)->prev != ((void *) 0x122 + (0xdead000000000000UL))))):
[ 83.505580][ T4320] WARNING: CPU: 1 PID: 4320 at security/apparmor/lib.c:520 aa_policy_destroy+0x167/0x1b0
[ 83.531501][ T4320] Modules linked in:
[ 83.535631][ T4320] CPU: 1 PID: 4320 Comm: syz.0.17 Not tainted syzkaller #0
[ 83.543927][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 83.554258][ T4320] RIP: 0010:aa_policy_destroy+0x167/0x1b0
[ 83.560292][ T4320] Code: 85 ed 7e 4c e8 8a 7d cd fd 5b 41 5c 41 5e 41 5f 5d c3 e8 7c 7d cd fd 48 c7 c7 20 5c 74 8a 48 c7 c6 88 15 d1 8b e8 a9 29 0a 06 <0f> 0b e9 07 ff ff ff e8 5d 7d cd fd 48 c7 c7 e0 5c 74 8a 48 c7 c6
[ 83.581405][ T4320] RSP: 0018:ffffc90002e3f450 EFLAGS: 00010246
[ 83.587767][ T4320] RAX: 49129d353082c800 RBX: ffff88807c047800 RCX: ffff888025fbd940
[ 83.595942][ T4320] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 83.604142][ T4320] RBP: 0000000000000cc0 R08: ffff8880b912795b R09: 1ffff11017224f2b
[ 83.612997][ T4320] R10: dffffc0000000000 R11: ffffed1017224f2c R12: dead000000000122
[ 83.621107][ T4320] R13: dffffc0000000000 R14: ffff88807c047828 R15: dffffc0000000000
[ 83.629797][ T4320] FS: 000055559251a500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[ 83.640645][ T4320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 83.647482][ T4320] CR2: 0000001b31463fff CR3: 00000000725ff000 CR4: 00000000003506f0
[ 83.655719][ T4320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 83.663991][ T4320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 83.671995][ T4320] Call Trace:
[ 83.676255][ T4320]
[ 83.679229][ T4320] aa_free_profile+0x5e/0x8a0
[ 83.684198][ T4320] ? aa_policy_init+0x21a/0x260
[ 83.689272][ T4320] aa_alloc_profile+0x11e/0x270
[ 83.694579][ T4320] aa_unpack+0x1214/0x4e30
[ 83.699077][ T4320] ? aa_load_ent_alloc+0xa0/0xa0
[ 83.704767][ T4320] ? finish_lock_switch+0x12d/0x290
[ 83.710009][ T4320] ? lockdep_hardirqs_on+0x94/0x140
[ 83.716287][ T4320] ? finish_lock_switch+0x12d/0x290
[ 83.721582][ T4320] ? __schedule+0x11cb/0x4350
[ 83.727813][ T4320] ? add_chain_block+0x9b0/0x9b0
[ 83.733084][ T4320] aa_replace_profiles+0x20f/0x2ac0
[ 83.738331][ T4320] ? aa_may_manage_policy+0x7a0/0x7a0
[ 83.744108][ T4320] ? mark_lock+0x94/0x320
[ 83.748496][ T4320] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 83.755333][ T4320] ? lock_chain_count+0x20/0x20
[ 83.760244][ T4320] ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 83.766304][ T4320] ? lockdep_hardirqs_on+0x94/0x140
[ 83.771540][ T4320] ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 83.777617][ T4320] ? __might_fault+0xb7/0x110
[ 83.783322][ T4320] ? __lock_acquire+0x7b50/0x7b50
[ 83.788431][ T4320] ? _copy_from_user+0x111/0x170
[ 83.794120][ T4320] ? aa_simple_write_to_buffer+0x163/0x1e0
[ 83.799975][ T4320] policy_update+0xce/0x160
[ 83.804837][ T4320] profile_replace+0x1ca/0x320
[ 83.809643][ T4320] ? aa_simple_write_to_buffer+0x1e0/0x1e0
[ 83.815956][ T4320] vfs_write+0x304/0xd70
[ 83.820240][ T4320] ? lockdep_hardirqs_on+0x94/0x140
[ 83.826930][ T4320] ? file_end_write+0x250/0x250
[ 83.831836][ T4320] ? __context_tracking_exit+0x4c/0x80
[ 83.838395][ T4320] ? __fdget_pos+0x2c6/0x370
[ 83.843364][ T4320] ksys_write+0x153/0x260
[ 83.847728][ T4320] ? __ia32_sys_read+0x80/0x80
[ 83.852857][ T4320] ? lockdep_hardirqs_on+0x94/0x140
[ 83.858101][ T4320] do_syscall_64+0x4c/0xa0
[ 83.872697][ T4320] ? clear_bhb_loop+0x30/0x80
[ 83.877466][ T4320] ? clear_bhb_loop+0x30/0x80
[ 83.886043][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.892003][ T4320] RIP: 0033:0x7f91d0cd90d9
[ 83.897141][ T4320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 83.917180][ T4320] RSP: 002b:00007ffd10d50fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 83.925861][ T4320] RAX: ffffffffffffffda RBX: 00007f91d0f60fa0 RCX: 00007f91d0cd90d9
[ 83.934200][ T4320] RDX: 000000000000004d RSI: 0000200000000300 RDI: 0000000000000003
[ 83.942926][ T4268] Bluetooth: hci0: command 0x040f tx timeout
[ 83.949192][ T4320] RBP: 00007ffd10d51050 R08: 0000000000000000 R09: 0000000000000000
[ 83.958939][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 83.967226][ T4320] R13: 00007f91d0f60fac R14: 00007f91d0f60fa0 R15: 00007f91d0f60fa0
[ 83.975629][ T4320]
[ 83.978698][ T4320] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 83.985993][ T4320] CPU: 0 PID: 4320 Comm: syz.0.17 Not tainted syzkaller #0
[ 83.993211][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 84.003291][ T4320] Call Trace:
[ 84.006597][ T4320]
[ 84.009549][ T4320] dump_stack_lvl+0x188/0x250
[ 84.014271][ T4320] ? show_regs_print_info+0x20/0x20
[ 84.019503][ T4320] ? load_image+0x410/0x410
[ 84.024049][ T4320] panic+0x2f8/0x850
[ 84.027983][ T4320] ? bpf_jit_dump+0xd0/0xd0
[ 84.032524][ T4320] ? aa_policy_destroy+0x167/0x1b0
[ 84.037663][ T4320] __warn+0x248/0x2b0
[ 84.041675][ T4320] ? aa_policy_destroy+0x167/0x1b0
[ 84.046813][ T4320] report_bug+0x1b9/0x2e0
[ 84.051205][ T4320] handle_bug+0x3a/0x70
[ 84.055393][ T4320] exc_invalid_op+0x16/0x40
[ 84.059931][ T4320] asm_exc_invalid_op+0x16/0x20
[ 84.064809][ T4320] RIP: 0010:aa_policy_destroy+0x167/0x1b0
[ 84.070557][ T4320] Code: 85 ed 7e 4c e8 8a 7d cd fd 5b 41 5c 41 5e 41 5f 5d c3 e8 7c 7d cd fd 48 c7 c7 20 5c 74 8a 48 c7 c6 88 15 d1 8b e8 a9 29 0a 06 <0f> 0b e9 07 ff ff ff e8 5d 7d cd fd 48 c7 c7 e0 5c 74 8a 48 c7 c6
[ 84.090192][ T4320] RSP: 0018:ffffc90002e3f450 EFLAGS: 00010246
[ 84.096312][ T4320] RAX: 49129d353082c800 RBX: ffff88807c047800 RCX: ffff888025fbd940
[ 84.104313][ T4320] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 84.112362][ T4320] RBP: 0000000000000cc0 R08: ffff8880b912795b R09: 1ffff11017224f2b
[ 84.120373][ T4320] R10: dffffc0000000000 R11: ffffed1017224f2c R12: dead000000000122
[ 84.128384][ T4320] R13: dffffc0000000000 R14: ffff88807c047828 R15: dffffc0000000000
[ 84.136408][ T4320] aa_free_profile+0x5e/0x8a0
[ 84.141126][ T4320] ? aa_policy_init+0x21a/0x260
[ 84.146013][ T4320] aa_alloc_profile+0x11e/0x270
[ 84.150904][ T4320] aa_unpack+0x1214/0x4e30
[ 84.155367][ T4320] ? aa_load_ent_alloc+0xa0/0xa0
[ 84.160339][ T4320] ? finish_lock_switch+0x12d/0x290
[ 84.165585][ T4320] ? lockdep_hardirqs_on+0x94/0x140
[ 84.170814][ T4320] ? finish_lock_switch+0x12d/0x290
[ 84.176049][ T4320] ? __schedule+0x11cb/0x4350
[ 84.180761][ T4320] ? add_chain_block+0x9b0/0x9b0
[ 84.185731][ T4320] aa_replace_profiles+0x20f/0x2ac0
[ 84.190978][ T4320] ? aa_may_manage_policy+0x7a0/0x7a0
[ 84.196386][ T4320] ? mark_lock+0x94/0x320
[ 84.200753][ T4320] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 84.206777][ T4320] ? lock_chain_count+0x20/0x20
[ 84.211669][ T4320] ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 84.217337][ T4320] ? lockdep_hardirqs_on+0x94/0x140
[ 84.222595][ T4320] ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 84.228281][ T4320] ? __might_fault+0xb7/0x110
[ 84.232987][ T4320] ? __lock_acquire+0x7b50/0x7b50
[ 84.238054][ T4320] ? _copy_from_user+0x111/0x170
[ 84.243026][ T4320] ? aa_simple_write_to_buffer+0x163/0x1e0
[ 84.248861][ T4320] policy_update+0xce/0x160
[ 84.253404][ T4320] profile_replace+0x1ca/0x320
[ 84.258203][ T4320] ? aa_simple_write_to_buffer+0x1e0/0x1e0
[ 84.264039][ T4320] vfs_write+0x304/0xd70
[ 84.268314][ T4320] ? lockdep_hardirqs_on+0x94/0x140
[ 84.273569][ T4320] ? file_end_write+0x250/0x250
[ 84.278449][ T4320] ? __context_tracking_exit+0x4c/0x80
[ 84.283945][ T4320] ? __fdget_pos+0x2c6/0x370
[ 84.288561][ T4320] ksys_write+0x153/0x260
[ 84.292916][ T4320] ? __ia32_sys_read+0x80/0x80
[ 84.297705][ T4320] ? lockdep_hardirqs_on+0x94/0x140
[ 84.302935][ T4320] do_syscall_64+0x4c/0xa0
[ 84.307374][ T4320] ? clear_bhb_loop+0x30/0x80
[ 84.312073][ T4320] ? clear_bhb_loop+0x30/0x80
[ 84.316787][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 84.322718][ T4320] RIP: 0033:0x7f91d0cd90d9
[ 84.327162][ T4320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 84.346798][ T4320] RSP: 002b:00007ffd10d50fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 84.355250][ T4320] RAX: ffffffffffffffda RBX: 00007f91d0f60fa0 RCX: 00007f91d0cd90d9
[ 84.363245][ T4320] RDX: 000000000000004d RSI: 0000200000000300 RDI: 0000000000000003
[ 84.371237][ T4320] RBP: 00007ffd10d51050 R08: 0000000000000000 R09: 0000000000000000
[ 84.379230][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 84.387219][ T4320] R13: 00007f91d0f60fac R14: 00007f91d0f60fa0 R15: 00007f91d0f60fa0
[ 84.395259][ T4320]
[ 84.398616][ T4320] Kernel Offset: disabled
[ 84.403073][ T4320] Rebooting in 86400 seconds..