SYZFAIL: failed to recv rpc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) Warning: Permanently added '[localhost]:4397' (ED25519) to the list of known hosts. 2026/02/03 10:22:05 parsed 1 programs syzkaller login: [ 89.640306][ T5309] cgroup: Unknown subsys name 'net' [ 89.708464][ T5309] cgroup: Unknown subsys name 'cpuset' [ 89.713890][ T5309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.645660][ T5309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.046112][ T1355] cfg80211: failed to load regulatory.db [ 97.968772][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.972357][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.055637][ T5333] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.817276][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.834593][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.807443][ T5332] syz-executor (5332) used greatest stack depth: 16992 bytes left [ 101.065338][ T5385] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.071313][ T5385] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.075281][ T5385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.078827][ T5385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.082327][ T5385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.105361][ T5385] Bluetooth: hci0: command tx timeout [ 104.056815][ T5378] chnl_net:caif_netlink_parms(): no params data found [ 104.311466][ T5378] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.324525][ T5378] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.338498][ T5378] bridge_slave_0: entered allmulticast mode [ 104.348418][ T5378] bridge_slave_0: entered promiscuous mode [ 104.366114][ T5378] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.372236][ T5378] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.380405][ T5378] bridge_slave_1: entered allmulticast mode [ 104.391950][ T5378] bridge_slave_1: entered promiscuous mode [ 104.445899][ T5378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.455953][ T5378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.498578][ T5378] team0: Port device team_slave_0 added [ 104.515416][ T5378] team0: Port device team_slave_1 added [ 104.557302][ T5378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.560557][ T5378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.585113][ T5378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.606207][ T5378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.609309][ T5378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.634476][ T5378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.696257][ T5378] hsr_slave_0: entered promiscuous mode [ 104.705395][ T5378] hsr_slave_1: entered promiscuous mode [ 105.010558][ T5378] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.032467][ T5378] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.050778][ T5378] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.067521][ T5378] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.185378][ T5385] Bluetooth: hci0: command tx timeout [ 105.207424][ T5378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.237795][ T5378] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.249584][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.252912][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.281621][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.284860][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.593546][ T5378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.671398][ T5378] veth0_vlan: entered promiscuous mode [ 105.696158][ T5378] veth1_vlan: entered promiscuous mode [ 105.748765][ T5378] veth0_macvtap: entered promiscuous mode [ 105.756683][ T5378] veth1_macvtap: entered promiscuous mode [ 105.789681][ T5378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.808235][ T5378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.830128][ T1047] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.834082][ T1047] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.856431][ T1047] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.883466][ T1047] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/02/03 10:22:24 executed programs: 0 [ 106.113999][ T4667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.119877][ T4667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.123562][ T4667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.128056][ T4667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.131756][ T4667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.481060][ T5431] chnl_net:caif_netlink_parms(): no params data found [ 106.551486][ T5431] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.554833][ T5431] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.558076][ T5431] bridge_slave_0: entered allmulticast mode [ 106.562261][ T5431] bridge_slave_0: entered promiscuous mode [ 106.567433][ T5431] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.570695][ T5431] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.574093][ T5431] bridge_slave_1: entered allmulticast mode [ 106.578858][ T5431] bridge_slave_1: entered promiscuous mode [ 106.605495][ T5431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.611881][ T5431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.641825][ T5431] team0: Port device team_slave_0 added [ 106.646755][ T5431] team0: Port device team_slave_1 added [ 106.695603][ T5431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.698728][ T5431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.734558][ T5431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.741983][ T5431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.754799][ T5431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.774886][ T5431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.856155][ T5431] hsr_slave_0: entered promiscuous mode [ 106.859438][ T5431] hsr_slave_1: entered promiscuous mode [ 106.862623][ T5431] debugfs: 'hsr0' already exists in 'hsr' [ 106.874944][ T5431] Cannot create hsr debugfs directory [ 107.178892][ T5431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.198258][ T5431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.206086][ T5431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.226195][ T5431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.265257][ T5385] Bluetooth: hci0: command tx timeout [ 107.368401][ T5431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.394271][ T5431] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.416363][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.419603][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.435604][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.438882][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.712106][ T5431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.753868][ T5431] veth0_vlan: entered promiscuous mode [ 107.762503][ T5431] veth1_vlan: entered promiscuous mode [ 107.787321][ T5431] veth0_macvtap: entered promiscuous mode [ 107.793320][ T5431] veth1_macvtap: entered promiscuous mode [ 107.810292][ T5431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.823537][ T5431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.837234][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.848587][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.852575][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.864175][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.963055][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.981244][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.009294][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.012767][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 108.154619][ T5385] Bluetooth: hci1: command tx timeout [ 108.599493][ T1042] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.768171][ T1042] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.860420][ T1042] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.915773][ T1042] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.125269][ T1042] bridge_slave_1: left allmulticast mode [ 109.144667][ T1042] bridge_slave_1: left promiscuous mode [ 109.150680][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.162663][ T1042] bridge_slave_0: left allmulticast mode [ 109.167627][ T1042] bridge_slave_0: left promiscuous mode [ 109.170319][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.636134][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.642386][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.647731][ T1042] bond0 (unregistering): Released all slaves [ 109.775486][ T1042] hsr_slave_0: left promiscuous mode [ 109.790661][ T1042] hsr_slave_1: left promiscuous mode [ 109.801454][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.814948][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.832672][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.845740][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.877984][ T1042] veth1_macvtap: left promiscuous mode [ 109.880829][ T1042] veth0_macvtap: left promiscuous mode [ 109.883474][ T1042] veth1_vlan: left promiscuous mode [ 109.897422][ T1042] veth0_vlan: left promiscuous mode [ 110.381312][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 110.408278][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 110.968263][ T1042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.042780][ T1042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.117789][ T1042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.167397][ T1042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.316274][ T1042] bridge_slave_1: left allmulticast mode [ 111.318883][ T1042] bridge_slave_1: left promiscuous mode [ 111.321731][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.339024][ T1042] bridge_slave_0: left allmulticast mode [ 111.341780][ T1042] bridge_slave_0: left promiscuous mode [ 111.355540][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.597247][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.602788][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.608157][ T1042] bond0 (unregistering): Released all slaves [ 111.840587][ T1042] hsr_slave_0: left promiscuous mode [ 111.854619][ T1042] hsr_slave_1: left promiscuous mode [ 111.859842][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.863183][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.875934][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.879279][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.917578][ T1042] veth1_macvtap: left promiscuous mode [ 111.920146][ T1042] veth0_macvtap: left promiscuous mode [ 111.922815][ T1042] veth1_vlan: left promiscuous mode [ 111.935075][ T1042] veth0_vlan: left promiscuous mode [ 112.312246][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 112.338039][ T1042] team0 (unregistering): Port device team_slave_0 removed syzkaller build log: go env (err=) AR='ar' CC='gcc' CGO_CFLAGS='-O2 -g' CGO_CPPFLAGS='' CGO_CXXFLAGS='-O2 -g' CGO_ENABLED='1' CGO_FFLAGS='-O2 -g' CGO_LDFLAGS='-O2 -g' CXX='g++' GCCGO='gccgo' GO111MODULE='auto' GOAMD64='v1' GOARCH='amd64' GOAUTH='netrc' GOBIN='' GOCACHE='/syzkaller/.cache/go-build' GOCACHEPROG='' GODEBUG='' GOENV='/syzkaller/.config/go/env' GOEXE='' GOEXPERIMENT='' GOFIPS140='off' GOFLAGS='' GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build2866193758=/tmp/go-build -gno-record-gcc-switches' GOHOSTARCH='amd64' GOHOSTOS='linux' GOINSECURE='' GOMOD='/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/go.mod' GOMODCACHE='/syzkaller/jobs/linux/gopath/pkg/mod' GONOPROXY='' GONOSUMDB='' GOOS='linux' GOPATH='/syzkaller/jobs/linux/gopath' GOPRIVATE='' GOPROXY='https://proxy.golang.org,direct' GOROOT='/usr/local/go' GOSUMDB='sum.golang.org' GOTELEMETRY='local' GOTELEMETRYDIR='/syzkaller/.config/go/telemetry' GOTMPDIR='' GOTOOLCHAIN='auto' GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64' GOVCS='' GOVERSION='go1.24.4' GOWORK='' PKG_CONFIG='pkg-config' git status (err=) HEAD detached at d1b870e1003b nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d1b870e1003b52891d2196c1e2ee42fe905010ba -X github.com/google/syzkaller/prog.gitRevisionDate=20251128-125159" ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d1b870e1003b52891d2196c1e2ee42fe905010ba -X github.com/google/syzkaller/prog.gitRevisionDate=20251128-125159" ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env bin/syz-sysgen touch .descriptions GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d1b870e1003b52891d2196c1e2ee42fe905010ba -X github.com/google/syzkaller/prog.gitRevisionDate=20251128-125159" -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog mkdir -p ./bin/linux_amd64 g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \ -m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -DGOOS_linux=1 -DGOARCH_amd64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"d1b870e1003b52891d2196c1e2ee42fe905010ba\" /usr/bin/ld: /tmp/ccloRd5C.o: in function `Connection::Connect(char const*, char const*)': executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x386): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking ./tools/check-syzos.sh 2>/dev/null