09-Nov-2026 23:47:14: building syzkaller on d1b870e1003b52891d2196c1e2ee42fe905010ba... 09-Nov-2026 23:47:42: fetching kernel... 09-Nov-2026 23:47:44: checked out kernel commit 7475ea8b58616b33c04afb976cf0fbaad9dd63fb ("Linux 7.4-rc2", 2026-11-08 16:22:20 -0800 -0800) 09-Nov-2026 23:47:44: cleaning kernel... 09-Nov-2026 23:47:46: building kernel... 09-Nov-2026 23:58:41: kernel built successfully with compiler Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 09-Nov-2026 23:58:41: testing patch... 10-Nov-2026 00:01:19: aggregating test results failed: SYZFAIL: failed to recv rpc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) syzkaller login: qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x89000) [ 110.653504][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 110.653522][ T1029] ata1: failed to read log page 10h (errno=-5) [ 110.653534][ T1029] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 110.653546][ T1029] ata1.00: irq_stat 0x41000000 [ 110.653556][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 110.653563][ T1029] ata1.00: cmd 61/48:70:ee:bc:04/04:00:00:00:00/40 tag 14 ncq dma 561152 out [ 110.653563][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 110.653591][ T1029] ata1.00: status: { DRDY } [ 110.653600][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 110.653606][ T1029] ata1.00: cmd 61/98:78:36:c1:04/1f:00:00:00:00/40 tag 15 ncq dma 4141056 ou [ 110.653606][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 110.653633][ T1029] ata1.00: status: { DRDY } [ 110.654593][ T1029] ata1.00: configured for UDMA/100 [ 110.655071][ T1029] ata1: EH complete Warning: Permanently added '[localhost]:63343' (ED25519) to the list of known hosts. 2026/11/10 00:00:41 parsed 1 programs [ 119.921625][ T5318] cgroup: Unknown subsys name 'net' [ 119.994936][ T5318] cgroup: Unknown subsys name 'cpuset' [ 120.002499][ T5318] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 121.697288][ T5318] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x283000) [ 123.513970][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 123.513984][ T1029] ata1: failed to read log page 10h (errno=-5) [ 123.513991][ T1029] ata1.00: NCQ disabled due to excessive errors [ 123.513996][ T1029] ata1.00: exception Emask 0x1 SAct 0x1000000 SErr 0x0 action 0x0 [ 123.514003][ T1029] ata1.00: irq_stat 0x40000008 [ 123.514013][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 123.514018][ T1029] ata1.00: cmd 61/18:c0:f6:c3:05/14:00:00:00:00/40 tag 24 ncq dma 2633728 ou [ 123.514018][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 123.514039][ T1029] ata1.00: status: { DRDY } [ 123.514045][ T1029] ata1.00: error: { ABRT } [ 123.517151][ T1029] ata1.00: configured for UDMA/100 [ 123.517448][ T1029] ata1: EH complete [ 127.382944][ T5332] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 127.804210][ T5339] br_netfilter no longer supported in user namespaces [ 129.193008][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.193100][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.193245][ T5345] bridge_slave_0: entered allmulticast mode [ 129.196719][ T5345] bridge_slave_0: entered promiscuous mode [ 129.217015][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.217088][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.217182][ T5345] bridge_slave_1: entered allmulticast mode [ 129.230059][ T5345] bridge_slave_1: entered promiscuous mode [ 129.287494][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.298884][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.357639][ T5345] team0: Port device team_slave_0 added [ 129.365153][ T5345] team0: Port device team_slave_1 added [ 129.414152][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.414167][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.414181][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.441517][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.441534][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.441549][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.548677][ T5345] hsr_slave_0: entered promiscuous mode [ 129.553891][ T5345] hsr_slave_1: entered promiscuous mode [ 129.774784][ T5345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.783771][ T5345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.785514][ T5345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.788517][ T5345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.800575][ T5345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.808888][ T5345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.818154][ T5345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.828366][ T5345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.891860][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.891940][ T5345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.892338][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.892483][ T5345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.944995][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.946771][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.030845][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.064960][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.081997][ T187] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.082065][ T187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.103900][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.104004][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.736467][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.825193][ T5345] veth0_vlan: entered promiscuous mode [ 130.845763][ T5345] veth1_vlan: entered promiscuous mode [ 130.897452][ T5345] veth0_macvtap: entered promiscuous mode [ 130.913434][ T5345] veth1_macvtap: entered promiscuous mode [ 130.947998][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.964555][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.020221][ T187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.020257][ T187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.020276][ T187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.020297][ T187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.407147][ T1151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.084233][ T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.084250][ T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.156959][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.156976][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.223429][ T1151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.041025][ T1151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.472567][ T1151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.974033][ T1151] bridge_slave_1: left allmulticast mode [ 133.974072][ T1151] bridge_slave_1: left promiscuous mode [ 133.975089][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.019114][ T1151] bridge_slave_0: left allmulticast mode [ 134.019134][ T1151] bridge_slave_0: left promiscuous mode [ 134.034148][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.484248][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.495332][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.498263][ T1151] bond0 (unregistering): Released all slaves [ 134.630697][ T1151] hsr_slave_0: left promiscuous mode [ 134.631335][ T1151] hsr_slave_1: left promiscuous mode [ 134.632886][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.632960][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.638172][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.638192][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.683223][ T1151] veth1_macvtap: left promiscuous mode [ 134.683276][ T1151] veth0_macvtap: left promiscuous mode [ 134.683347][ T1151] veth1_vlan: left promiscuous mode [ 134.685890][ T1151] veth0_vlan: left promiscuous mode [ 135.379158][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 135.404689][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 135.594726][ T5012] 8021q: adding VLAN 0 to HW filter on device eth2 [ 136.518337][ T5012] 8021q: adding VLAN 0 to HW filter on device eth3 [ 137.476126][ T5012] 8021q: adding VLAN 0 to HW filter on device eth5 [ 137.943069][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.943944][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.349916][ T5012] 8021q: adding VLAN 0 to HW filter on device eth4 [ 140.145074][ T5478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.148012][ T5478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.148446][ T5478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.149121][ T5478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.167038][ T5478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/11/10 00:01:05 executed programs: 0 [ 141.155977][ T4667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.158514][ T4667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.166516][ T4667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.168024][ T4667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.168535][ T4667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.689531][ T5491] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.689650][ T5491] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.689727][ T5491] bridge_slave_0: entered allmulticast mode [ 141.691179][ T5491] bridge_slave_0: entered promiscuous mode [ 141.706472][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.706632][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.706721][ T5491] bridge_slave_1: entered allmulticast mode [ 141.707825][ T5491] bridge_slave_1: entered promiscuous mode [ 141.743030][ T5491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.744886][ T5491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.771713][ T5491] team0: Port device team_slave_0 added [ 141.773938][ T5491] team0: Port device team_slave_1 added [ 141.799092][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.799105][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.799118][ T5491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.820791][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.820804][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.820817][ T5491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.871322][ T5491] hsr_slave_0: entered promiscuous mode [ 141.871834][ T5491] hsr_slave_1: entered promiscuous mode [ 142.367989][ T5491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.380363][ T5491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.380946][ T5491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.386360][ T5491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.387071][ T5491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.406653][ T5491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.407988][ T5491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.423214][ T5491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.476455][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.476533][ T5491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.476758][ T5491] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.476834][ T5491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.581342][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.582519][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.607091][ T5491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.634924][ T5491] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.652277][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.652347][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.667661][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.667729][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.220729][ T5478] Bluetooth: hci0: command tx timeout [ 143.393275][ T5491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.476357][ T5491] veth0_vlan: entered promiscuous mode [ 143.491554][ T5491] veth1_vlan: entered promiscuous mode [ 143.557638][ T5491] veth0_macvtap: entered promiscuous mode [ 143.571651][ T5491] veth1_macvtap: entered promiscuous mode [ 143.603058][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.617458][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.649772][ T187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.649805][ T187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.649824][ T187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.649842][ T187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.798478][ T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.798497][ T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.883520][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.883537][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 145.216382][ T192] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.993715][ T192] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.131303][ T192] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.163865][ T192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.276868][ T192] bridge_slave_1: left allmulticast mode [ 146.276888][ T192] bridge_slave_1: left promiscuous mode [ 146.277049][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.279033][ T192] bridge_slave_0: left allmulticast mode [ 146.279047][ T192] bridge_slave_0: left promiscuous mode [ 146.279279][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.431636][ T192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.433595][ T192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.434727][ T192] bond0 (unregistering): Released all slaves [ 146.672377][ T192] hsr_slave_0: left promiscuous mode [ 146.672938][ T192] hsr_slave_1: left promiscuous mode [ 146.673590][ T192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.673602][ T192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.674889][ T192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.674901][ T192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.708566][ T192] veth1_macvtap: left promiscuous mode [ 146.708624][ T192] veth0_macvtap: left promiscuous mode [ 146.708748][ T192] veth1_vlan: left promiscuous mode [ 146.708795][ T192] veth0_vlan: left promiscuous mode [ 147.027372][ T192] team0 (unregistering): Port device team_slave_1 removed [ 147.037280][ T192] team0 (unregistering): Port device team_slave_0 removed [ 147.155807][ T5012] 8021q: adding VLAN 0 to HW filter on device eth2 [ 147.456735][ T5012] 8021q: adding VLAN 0 to HW filter on device eth3 [ 147.654169][ T5012] 8021q: adding VLAN 0 to HW filter on device eth4 [ 147.850496][ T5012] 8021q: adding VLAN 0 to HW filter on device eth5