03-Sep-2026 12:33:47: building syzkaller on d1b870e1003b52891d2196c1e2ee42fe905010ba... 03-Sep-2026 12:34:16: fetching kernel... 03-Sep-2026 12:34:19: checked out kernel commit 940de590b839f71d6dc846160534bf202401b8b7 ("Merge tag 'hardening-v7.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux", 2026-09-02 16:02:02 -0700 -0700) 03-Sep-2026 12:34:19: cleaning kernel... 03-Sep-2026 12:34:21: building kernel... 03-Sep-2026 12:45:52: kernel built successfully with compiler Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 03-Sep-2026 12:45:52: testing patch... 03-Sep-2026 12:48:29: aggregating test results failed: SYZFAIL: failed to recv rpc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) syzkaller login: qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x346000) qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xc2000) [ 91.838539][ T1122] cfg80211: failed to load regulatory.db [ 110.414153][ T1024] ata1.00: exception Emask 0x0 SAct 0x4100 SErr 0x0 action 0x6 frozen [ 110.417837][ T1024] ata1.00: failed command: WRITE FPDMA QUEUED [ 110.420950][ T1024] ata1.00: cmd 61/30:40:36:54:04/1a:00:00:00:00/40 tag 8 ncq dma 3432448 ou [ 110.420950][ T1024] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 110.428033][ T1024] ata1.00: status: { DRDY } [ 110.430142][ T1024] ata1.00: failed command: WRITE FPDMA QUEUED [ 110.433007][ T1024] ata1.00: cmd 61/10:70:fe:b7:04/06:00:00:00:00/40 tag 14 ncq dma 794624 out [ 110.433007][ T1024] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 110.440447][ T1024] ata1.00: status: { DRDY } [ 110.444070][ T1024] ata1: hard resetting link [ 110.765276][ T1024] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 110.771008][ T1024] ata1.00: configured for UDMA/100 [ 110.774858][ T1024] ata1: EH complete Warning: Permanently added '[localhost]:23824' (ED25519) to the list of known hosts. 2026/09/03 12:47:50 parsed 1 programs qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa8000) [ 115.995789][ T1024] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 115.995867][ T1024] ata1: failed to read log page 10h (errno=-5) [ 115.995967][ T1024] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0 [ 115.995999][ T1024] ata1.00: irq_stat 0x41000000 [ 115.996033][ T1024] ata1.00: failed command: WRITE FPDMA QUEUED [ 115.996060][ T1024] ata1.00: cmd 61/20:00:6e:0f:05/03:00:00:00:00/40 tag 0 ncq dma 409600 out [ 115.996060][ T1024] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 115.996111][ T1024] ata1.00: status: { DRDY } [ 115.996144][ T1024] ata1.00: failed command: WRITE FPDMA QUEUED [ 115.996170][ T1024] ata1.00: cmd 61/40:f0:2e:0a:05/05:00:00:00:00/40 tag 30 ncq dma 688128 out [ 115.996170][ T1024] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 115.996222][ T1024] ata1.00: status: { DRDY } [ 115.997339][ T1024] ata1.00: configured for UDMA/100 [ 115.997715][ T1024] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) [ 116.185072][ T1024] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 116.185115][ T1024] ata1: failed to read log page 10h (errno=-5) [ 116.185147][ T1024] ata1.00: NCQ disabled due to excessive errors [ 116.185168][ T1024] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0 [ 116.185192][ T1024] ata1.00: irq_stat 0x41000000 [ 116.185216][ T1024] ata1.00: failed command: WRITE FPDMA QUEUED [ 116.185237][ T1024] ata1.00: cmd 61/00:00:36:c1:05/20:00:00:00:00/40 tag 0 ncq dma 4194304 ou [ 116.185237][ T1024] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 116.185285][ T1024] ata1.00: status: { DRDY } [ 116.185317][ T1024] ata1.00: failed command: WRITE FPDMA QUEUED [ 116.185343][ T1024] ata1.00: cmd 61/00:f0:36:a1:05/20:00:00:00:00/40 tag 30 ncq dma 4194304 ou [ 116.185343][ T1024] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 116.185391][ T1024] ata1.00: status: { DRDY } [ 116.186504][ T1024] ata1.00: configured for UDMA/100 [ 116.186950][ T1024] ata1: EH complete [ 117.991288][ T5307] cgroup: Unknown subsys name 'net' [ 118.059900][ T5307] cgroup: Unknown subsys name 'cpuset' [ 118.066744][ T5307] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 119.617280][ T5307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 125.589257][ T5312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 130.318404][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.318454][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.417312][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.417367][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.558084][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.558262][ T5361] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.558390][ T5361] bridge_slave_0: entered allmulticast mode [ 131.570226][ T5361] bridge_slave_0: entered promiscuous mode [ 131.582049][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.586684][ T5361] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.590234][ T5361] bridge_slave_1: entered allmulticast mode [ 131.596306][ T5361] bridge_slave_1: entered promiscuous mode [ 131.659598][ T5361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.670075][ T5361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.723831][ T5361] team0: Port device team_slave_0 added [ 131.732604][ T5361] team0: Port device team_slave_1 added [ 131.792177][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.795463][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.807015][ T5361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.824731][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.824776][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.824819][ T5361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.927202][ T5361] hsr_slave_0: entered promiscuous mode [ 131.933687][ T5361] hsr_slave_1: entered promiscuous mode [ 132.327320][ T5361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.354869][ T5361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.358776][ T5361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.374226][ T5361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.382436][ T5361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.395443][ T5361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.400715][ T5361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.418162][ T5361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.633325][ T5361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.680860][ T5361] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.698868][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.699088][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.733839][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.734553][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.508178][ T5361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.616676][ T5361] veth0_vlan: entered promiscuous mode [ 133.645530][ T5361] veth1_vlan: entered promiscuous mode [ 133.701846][ T5361] veth0_macvtap: entered promiscuous mode [ 133.717438][ T5361] veth1_macvtap: entered promiscuous mode [ 133.754889][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.784830][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.920426][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.956515][ T188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.960779][ T188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.965619][ T188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.093843][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.303483][ T5404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.310518][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.316689][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.322171][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.325924][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.893738][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.467324][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.820332][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.354856][ T13] bridge_slave_1: left allmulticast mode [ 136.359828][ T13] bridge_slave_1: left promiscuous mode [ 136.364051][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.380606][ T13] bridge_slave_0: left allmulticast mode [ 136.386479][ T13] bridge_slave_0: left promiscuous mode [ 136.386779][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.693794][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.708223][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.714717][ T13] bond0 (unregistering): Released all slaves [ 136.815612][ T13] hsr_slave_0: left promiscuous mode [ 136.819617][ T13] hsr_slave_1: left promiscuous mode [ 136.825166][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.825307][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.846359][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.846404][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.892471][ T13] veth1_macvtap: left promiscuous mode [ 136.895538][ T13] veth0_macvtap: left promiscuous mode [ 136.900558][ T13] veth1_vlan: left promiscuous mode [ 136.904272][ T13] veth0_vlan: left promiscuous mode [ 137.556274][ T13] team0 (unregistering): Port device team_slave_1 removed [ 137.570193][ T13] team0 (unregistering): Port device team_slave_0 removed [ 137.710076][ T4995] 8021q: adding VLAN 0 to HW filter on device eth2 [ 137.921656][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.921772][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.472743][ T4995] 8021q: adding VLAN 0 to HW filter on device eth3 [ 139.172297][ T4995] 8021q: adding VLAN 0 to HW filter on device eth4 2026/09/03 12:48:15 executed programs: 0 [ 139.457087][ T4648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.464211][ T4648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.471017][ T4648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.477449][ T4648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.481529][ T4648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.755083][ T4995] 8021q: adding VLAN 0 to HW filter on device eth5 [ 140.279784][ T5452] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.283080][ T5452] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.286730][ T5452] bridge_slave_0: entered allmulticast mode [ 140.290794][ T5452] bridge_slave_0: entered promiscuous mode [ 140.297374][ T5452] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.300722][ T5452] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.304360][ T5452] bridge_slave_1: entered allmulticast mode [ 140.308784][ T5452] bridge_slave_1: entered promiscuous mode [ 140.336790][ T5452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.346016][ T5452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.387397][ T5452] team0: Port device team_slave_0 added [ 140.392044][ T5452] team0: Port device team_slave_1 added [ 140.413558][ T5452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.416791][ T5452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.428166][ T5452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.435392][ T5452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.438653][ T5452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.449847][ T5452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.491519][ T5452] hsr_slave_0: entered promiscuous mode [ 140.495135][ T5452] hsr_slave_1: entered promiscuous mode [ 141.209184][ T5452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.227303][ T5452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.232858][ T5452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.246341][ T5452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.250062][ T5452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.259843][ T5452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.265576][ T5452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.278117][ T5452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.425594][ T5452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.458699][ T5452] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.480831][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.480925][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.502987][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.503085][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.516356][ T4648] Bluetooth: hci0: command tx timeout [ 142.261039][ T5452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.359902][ T5452] veth0_vlan: entered promiscuous mode [ 142.385315][ T5452] veth1_vlan: entered promiscuous mode [ 142.455868][ T5452] veth0_macvtap: entered promiscuous mode [ 142.468686][ T5452] veth1_macvtap: entered promiscuous mode [ 142.500255][ T5452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.514897][ T5452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.564311][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.605932][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.610328][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.614711][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.750451][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.754934][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.829470][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.833171][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 143.997679][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.722618][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.011541][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.053153][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.208067][ T13] bridge_slave_1: left allmulticast mode [ 145.211497][ T13] bridge_slave_1: left promiscuous mode [ 145.216492][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.229147][ T13] bridge_slave_0: left allmulticast mode [ 145.231644][ T13] bridge_slave_0: left promiscuous mode [ 145.235251][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.518680][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.529442][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.536538][ T13] bond0 (unregistering): Released all slaves [ 145.675597][ T4995] 8021q: adding VLAN 0 to HW filter on device eth2 [ 145.779677][ T13] hsr_slave_0: left promiscuous mode [ 145.783574][ T13] hsr_slave_1: left promiscuous mode [ 145.787631][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.791531][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.796832][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.800327][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.818451][ T13] veth1_macvtap: left promiscuous mode [ 145.818548][ T13] veth0_macvtap: left promiscuous mode [ 145.826636][ T13] veth1_vlan: left promiscuous mode [ 145.826740][ T13] veth0_vlan: left promiscuous mode [ 146.230995][ T13] team0 (unregistering): Port device team_slave_1 removed [ 146.245147][ T13] team0 (unregistering): Port device team_slave_0 removed [ 146.357373][ T4995] 8021q: adding VLAN 0 to HW filter on device eth3 [ 146.690947][ T4995] 8021q: adding VLAN 0 to HW filter on device eth4 [ 146.908809][ T4995] 8021q: adding VLAN 0 to HW filter on device eth5