SYZFAIL: failed to recv rpc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) Warning: Permanently added '[localhost]:31719' (ED25519) to the list of known hosts. syzkaller login: qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) [ 102.328522][ T1249] cfg80211: failed to load regulatory.db 2026/06/24 11:00:50 parsed 1 programs [ 106.926709][ T5293] cgroup: Unknown subsys name 'net' [ 107.005111][ T5293] cgroup: Unknown subsys name 'cpuset' [ 107.013660][ T5293] cgroup: Unknown subsys name 'rlimit' [ 148.402617][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.405760][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.699135][ T1030] ata1.00: exception Emask 0x0 SAct 0x20 SErr 0x0 action 0x6 frozen [ 165.702994][ T1030] ata1.00: failed command: WRITE FPDMA QUEUED [ 165.705842][ T1030] ata1.00: cmd 61/00:28:36:01:05/20:00:00:00:00/40 tag 5 ncq dma 4194304 ou [ 165.705842][ T1030] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 165.714219][ T1030] ata1.00: status: { DRDY } [ 165.716780][ T1030] ata1: hard resetting link [ 166.040943][ T1030] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 166.046274][ T1030] ata1.00: configured for UDMA/100 [ 166.049623][ T1030] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) [ 209.841058][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.843882][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 226.498931][ T1030] ata1.00: exception Emask 0x0 SAct 0x20 SErr 0x0 action 0x6 frozen [ 226.502721][ T1030] ata1.00: failed command: WRITE FPDMA QUEUED [ 226.505711][ T1030] ata1.00: cmd 61/00:28:36:41:0c/20:00:00:00:00/40 tag 5 ncq dma 4194304 ou [ 226.505711][ T1030] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 226.514126][ T1030] ata1.00: status: { DRDY } [ 226.517254][ T1030] ata1: hard resetting link [ 226.841056][ T1030] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 226.845328][ T1030] ata1.00: configured for UDMA/100 [ 226.848141][ T1030] ata1: EH complete Setting up swapspace version 1, size = 127995904 bytes [ 228.375620][ T5293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 234.720986][ T5332] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 235.285859][ T5339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.298579][ T5339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.307678][ T5339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.312555][ T5339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.317260][ T5339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.102441][ T5373] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.119076][ T5373] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.123003][ T5373] bridge_slave_0: entered allmulticast mode [ 240.128884][ T5373] bridge_slave_0: entered promiscuous mode [ 240.145758][ T5373] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.159088][ T5373] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.163017][ T5373] bridge_slave_1: entered allmulticast mode [ 240.169282][ T5373] bridge_slave_1: entered promiscuous mode [ 240.252540][ T5373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.268295][ T5373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.333146][ T5373] team0: Port device team_slave_0 added [ 240.340715][ T5373] team0: Port device team_slave_1 added [ 240.399739][ T5373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.403320][ T5373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.429310][ T5373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.452541][ T5373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.469377][ T5373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.489151][ T5373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.602328][ T5373] hsr_slave_0: entered promiscuous mode [ 240.607131][ T5373] hsr_slave_1: entered promiscuous mode [ 241.007710][ T5373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.022392][ T5373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.028467][ T5373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.045804][ T5373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 241.052623][ T5373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.062533][ T5373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.068213][ T5373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.076926][ T5373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.202282][ T5373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.233859][ T5373] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.247206][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.251166][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.287051][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.290488][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.967281][ T5373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.077640][ T5373] veth0_vlan: entered promiscuous mode [ 242.122212][ T5373] veth1_vlan: entered promiscuous mode [ 242.194197][ T5373] veth0_macvtap: entered promiscuous mode [ 242.223185][ T5373] veth1_macvtap: entered promiscuous mode [ 242.279493][ T5373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.286638][ T5373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.339645][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.354927][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.371518][ T120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.382149][ T120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.845505][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.810541][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.374914][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.725598][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.839234][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.864361][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.144480][ T30] bridge_slave_1: left allmulticast mode [ 245.159757][ T30] bridge_slave_1: left promiscuous mode [ 245.164600][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.184697][ T30] bridge_slave_0: left allmulticast mode [ 245.187652][ T30] bridge_slave_0: left promiscuous mode [ 245.202844][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.577602][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.590812][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.601583][ T30] bond0 (unregistering): Released all slaves [ 245.623536][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.637260][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.738388][ T30] hsr_slave_0: left promiscuous mode [ 245.777053][ T30] hsr_slave_1: left promiscuous mode [ 245.790657][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.805519][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.836183][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.856016][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.992708][ T30] veth1_macvtap: left promiscuous mode [ 246.017257][ T30] veth0_macvtap: left promiscuous mode [ 246.036326][ T30] veth1_vlan: left promiscuous mode [ 246.055940][ T30] veth0_vlan: left promiscuous mode [ 246.697211][ T30] team0 (unregistering): Port device team_slave_1 removed [ 246.728168][ T30] team0 (unregistering): Port device team_slave_0 removed [ 246.872402][ T4997] 8021q: adding VLAN 0 to HW filter on device eth2 [ 247.958409][ T4997] 8021q: adding VLAN 0 to HW filter on device eth3 [ 248.916574][ T4997] 8021q: adding VLAN 0 to HW filter on device eth4 [ 249.639179][ T4997] 8021q: adding VLAN 0 to HW filter on device eth5 2026/06/24 11:03:16 executed programs: 0 [ 250.376435][ T4650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.386336][ T4650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.393388][ T4650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.400315][ T4650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.404956][ T4650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.125885][ T5477] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.129763][ T5477] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.133031][ T5477] bridge_slave_0: entered allmulticast mode [ 251.137215][ T5477] bridge_slave_0: entered promiscuous mode [ 251.144621][ T5477] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.148131][ T5477] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.152641][ T5477] bridge_slave_1: entered allmulticast mode [ 251.156701][ T5477] bridge_slave_1: entered promiscuous mode [ 251.187456][ T5477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.197162][ T5477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.227859][ T5477] team0: Port device team_slave_0 added [ 251.233213][ T5477] team0: Port device team_slave_1 added [ 251.258376][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.262312][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.274679][ T5477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.283570][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.286677][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.300053][ T5477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.346339][ T5477] hsr_slave_0: entered promiscuous mode [ 251.350130][ T5477] hsr_slave_1: entered promiscuous mode [ 252.190311][ T5477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.204799][ T5477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.214621][ T5477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.234250][ T5477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.249658][ T5477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.270012][ T5477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.276643][ T5477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.302836][ T5477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.481055][ T4650] Bluetooth: hci0: command tx timeout [ 252.543566][ T5477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.582449][ T5477] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.597837][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.601148][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.637956][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.642018][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.511214][ T5477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.640222][ T5477] veth0_vlan: entered promiscuous mode [ 253.655391][ T5477] veth1_vlan: entered promiscuous mode [ 253.727495][ T5477] veth0_macvtap: entered promiscuous mode [ 253.746689][ T5477] veth1_macvtap: entered promiscuous mode [ 253.793937][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.813314][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.843635][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.875227][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.891482][ T131] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.901351][ T131] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.073711][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.089770][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.183589][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.193806][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 255.324483][ T120] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.692171][ T120] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.846986][ T120] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.987146][ T120] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.227531][ T120] bridge_slave_1: left allmulticast mode [ 256.236755][ T120] bridge_slave_1: left promiscuous mode [ 256.251480][ T120] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.267622][ T120] bridge_slave_0: left allmulticast mode [ 256.273170][ T120] bridge_slave_0: left promiscuous mode [ 256.278316][ T120] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.632696][ T120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.648205][ T120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.660900][ T120] bond0 (unregistering): Released all slaves [ 256.677346][ T4997] 8021q: adding VLAN 0 to HW filter on device eth2 [ 256.976363][ T120] hsr_slave_0: left promiscuous mode [ 256.989577][ T120] hsr_slave_1: left promiscuous mode [ 256.992903][ T120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.996217][ T120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.010914][ T120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.019985][ T120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.050384][ T120] veth1_macvtap: left promiscuous mode [ 257.052906][ T120] veth0_macvtap: left promiscuous mode [ 257.055330][ T120] veth1_vlan: left promiscuous mode [ 257.057901][ T120] veth0_vlan: left promiscuous mode [ 257.407360][ T120] team0 (unregistering): Port device team_slave_1 removed [ 257.424569][ T120] team0 (unregistering): Port device team_slave_0 removed [ 257.561493][ T4997] 8021q: adding VLAN 0 to HW filter on device eth3 [ 257.925904][ T4997] 8021q: adding VLAN 0 to HW filter on device eth4 [ 258.155194][ T4997] 8021q: adding VLAN 0 to HW filter on device eth5 syzkaller build log: go env (err=) AR='ar' CC='gcc' CGO_CFLAGS='-O2 -g' CGO_CPPFLAGS='' CGO_CXXFLAGS='-O2 -g' CGO_ENABLED='1' CGO_FFLAGS='-O2 -g' CGO_LDFLAGS='-O2 -g' CXX='g++' GCCGO='gccgo' GO111MODULE='auto' GOAMD64='v1' GOARCH='amd64' GOAUTH='netrc' GOBIN='' GOCACHE='/syzkaller/.cache/go-build' GOCACHEPROG='' GODEBUG='' GOENV='/syzkaller/.config/go/env' GOEXE='' GOEXPERIMENT='' GOFIPS140='off' GOFLAGS='' GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build2149244104=/tmp/go-build -gno-record-gcc-switches' GOHOSTARCH='amd64' GOHOSTOS='linux' GOINSECURE='' GOMOD='/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/go.mod' GOMODCACHE='/syzkaller/jobs/linux/gopath/pkg/mod' GONOPROXY='' GONOSUMDB='' GOOS='linux' GOPATH='/syzkaller/jobs/linux/gopath' GOPRIVATE='' GOPROXY='https://proxy.golang.org,direct' GOROOT='/usr/local/go' GOSUMDB='sum.golang.org' GOTELEMETRY='local' GOTELEMETRYDIR='/syzkaller/.config/go/telemetry' GOTMPDIR='' GOTOOLCHAIN='auto' GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64' GOVCS='' GOVERSION='go1.26.0' GOWORK='' PKG_CONFIG='pkg-config' git status (err=) HEAD detached at d1b870e1003b nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d1b870e1003b52891d2196c1e2ee42fe905010ba -X github.com/google/syzkaller/prog.gitRevisionDate=20251128-125159" ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d1b870e1003b52891d2196c1e2ee42fe905010ba -X github.com/google/syzkaller/prog.gitRevisionDate=20251128-125159" ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env bin/syz-sysgen touch .descriptions GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d1b870e1003b52891d2196c1e2ee42fe905010ba -X github.com/google/syzkaller/prog.gitRevisionDate=20251128-125159" -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog mkdir -p ./bin/linux_amd64 g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \ -m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -DGOOS_linux=1 -DGOARCH_amd64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"d1b870e1003b52891d2196c1e2ee42fe905010ba\" /usr/bin/ld: /tmp/cccTCu4t.o: in function `Connection::Connect(char const*, char const*)': executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x386): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking ./tools/check-syzos.sh 2>/dev/null