SYZFAIL: failed to recv rpc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) Warning: Permanently added '[localhost]:39712' (ED25519) to the list of known hosts. 2026/01/09 17:32:23 parsed 1 programs syzkaller login: [ 88.298589][ T5324] cgroup: Unknown subsys name 'net' [ 88.360726][ T5324] cgroup: Unknown subsys name 'cpuset' [ 88.365783][ T5324] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.046658][ T5324] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.822362][ T10] cfg80211: failed to load regulatory.db [ 96.349417][ T5346] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.369903][ T4056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.373422][ T4056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.548472][ T4056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.551874][ T4056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.583896][ T5399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.591218][ T5399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.594770][ T5399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.598455][ T5399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.601802][ T5399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.302981][ T5397] chnl_net:caif_netlink_parms(): no params data found [ 101.648168][ T5399] Bluetooth: hci0: command tx timeout [ 101.709750][ T5397] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.717045][ T5397] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.720123][ T5397] bridge_slave_0: entered allmulticast mode [ 101.748070][ T5397] bridge_slave_0: entered promiscuous mode [ 101.769254][ T5397] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.772352][ T5397] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.797597][ T5397] bridge_slave_1: entered allmulticast mode [ 101.807065][ T5397] bridge_slave_1: entered promiscuous mode [ 101.907147][ T5397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.925314][ T5397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.028087][ T5397] team0: Port device team_slave_0 added [ 102.037680][ T5397] team0: Port device team_slave_1 added [ 102.106094][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.117009][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.157151][ T5397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.172036][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.175091][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.207485][ T5397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.266180][ T5397] hsr_slave_0: entered promiscuous mode [ 102.278590][ T5397] hsr_slave_1: entered promiscuous mode [ 102.545933][ T5397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.568342][ T5397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.580249][ T5397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.597976][ T5397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.729743][ T5397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.762757][ T5397] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.784104][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.787483][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.812739][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.815930][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.153869][ T5397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.213075][ T5397] veth0_vlan: entered promiscuous mode [ 103.239424][ T5397] veth1_vlan: entered promiscuous mode [ 103.277979][ T5397] veth0_macvtap: entered promiscuous mode [ 103.291234][ T5397] veth1_macvtap: entered promiscuous mode [ 103.314386][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.335627][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.353004][ T968] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.368307][ T968] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.376782][ T968] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.395649][ T968] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/09 17:32:40 executed programs: 0 [ 103.662854][ T46] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.667381][ T46] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.670890][ T46] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.674620][ T46] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.678686][ T46] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.708116][ T968] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.728644][ T46] Bluetooth: hci0: command tx timeout [ 103.763246][ T968] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.809417][ T968] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.874860][ T968] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.928939][ T5437] chnl_net:caif_netlink_parms(): no params data found [ 104.055185][ T5437] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.067415][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.070712][ T5437] bridge_slave_0: entered allmulticast mode [ 104.074549][ T5437] bridge_slave_0: entered promiscuous mode [ 104.088979][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.092118][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.094763][ T5437] bridge_slave_1: entered allmulticast mode [ 104.108434][ T5437] bridge_slave_1: entered promiscuous mode [ 104.143854][ T5437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.169376][ T5437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.211189][ T5437] team0: Port device team_slave_0 added [ 104.219288][ T5437] team0: Port device team_slave_1 added [ 104.259806][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.262749][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.288094][ T5437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.307304][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.309954][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.337640][ T5437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.396316][ T5437] hsr_slave_0: entered promiscuous mode [ 104.407768][ T5437] hsr_slave_1: entered promiscuous mode [ 104.410739][ T5437] debugfs: 'hsr0' already exists in 'hsr' [ 104.414742][ T5437] Cannot create hsr debugfs directory [ 105.589057][ T968] bridge_slave_1: left allmulticast mode [ 105.593889][ T968] bridge_slave_1: left promiscuous mode [ 105.597114][ T968] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.620754][ T968] bridge_slave_0: left allmulticast mode [ 105.623186][ T968] bridge_slave_0: left promiscuous mode [ 105.625828][ T968] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.731201][ T46] Bluetooth: hci1: command tx timeout [ 105.809398][ T46] Bluetooth: hci0: command tx timeout [ 105.913708][ T968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.919639][ T968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.923749][ T968] bond0 (unregistering): Released all slaves [ 106.031513][ T968] hsr_slave_0: left promiscuous mode [ 106.044926][ T968] hsr_slave_1: left promiscuous mode [ 106.050346][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.054599][ T968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.067973][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.071184][ T968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.095044][ T968] veth1_macvtap: left promiscuous mode [ 106.098945][ T968] veth0_macvtap: left promiscuous mode [ 106.101032][ T968] veth1_vlan: left promiscuous mode [ 106.103213][ T968] veth0_vlan: left promiscuous mode [ 106.473543][ T968] team0 (unregistering): Port device team_slave_1 removed [ 106.490837][ T968] team0 (unregistering): Port device team_slave_0 removed [ 107.095543][ T5437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.101452][ T5437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.115908][ T5437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.134290][ T5437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.294508][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.309210][ T5437] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.316988][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.320539][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.337366][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.340490][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.517277][ T5437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.549738][ T5437] veth0_vlan: entered promiscuous mode [ 107.556674][ T5437] veth1_vlan: entered promiscuous mode [ 107.583777][ T5437] veth0_macvtap: entered promiscuous mode [ 107.590075][ T5437] veth1_macvtap: entered promiscuous mode [ 107.602824][ T5437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.613488][ T5437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.624015][ T4470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.632545][ T4470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.636276][ T4470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.657612][ T4470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.700857][ T4470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.704077][ T4470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.735562][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.741402][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.812375][ T46] Bluetooth: hci1: command tx timeout [ 107.887266][ T46] Bluetooth: hci0: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.685387][ T4056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.173198][ T4056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.218550][ T4056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.261536][ T4056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.358465][ T4056] bridge_slave_1: left allmulticast mode [ 111.363818][ T4056] bridge_slave_1: left promiscuous mode [ 111.367083][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.374329][ T4056] bridge_slave_0: left allmulticast mode [ 111.378739][ T4056] bridge_slave_0: left promiscuous mode [ 111.381404][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.582955][ T4056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.589612][ T4056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.593960][ T4056] bond0 (unregistering): Released all slaves [ 111.792382][ T4056] hsr_slave_0: left promiscuous mode [ 111.797287][ T4056] hsr_slave_1: left promiscuous mode [ 111.801228][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.804421][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.822925][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.826273][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.852719][ T4056] veth1_macvtap: left promiscuous mode [ 111.855300][ T4056] veth0_macvtap: left promiscuous mode [ 111.867175][ T4056] veth1_vlan: left promiscuous mode [ 111.869589][ T4056] veth0_vlan: left promiscuous mode [ 112.146283][ T4056] team0 (unregistering): Port device team_slave_1 removed [ 112.168342][ T4056] team0 (unregistering): Port device team_slave_0 removed syzkaller build log: go env (err=) AR='ar' CC='gcc' CGO_CFLAGS='-O2 -g' CGO_CPPFLAGS='' CGO_CXXFLAGS='-O2 -g' CGO_ENABLED='1' CGO_FFLAGS='-O2 -g' CGO_LDFLAGS='-O2 -g' CXX='g++' GCCGO='gccgo' GO111MODULE='auto' GOAMD64='v1' GOARCH='amd64' GOAUTH='netrc' GOBIN='' GOCACHE='/syzkaller/.cache/go-build' GOCACHEPROG='' GODEBUG='' GOENV='/syzkaller/.config/go/env' GOEXE='' GOEXPERIMENT='' GOFIPS140='off' GOFLAGS='' GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build257182490=/tmp/go-build -gno-record-gcc-switches' GOHOSTARCH='amd64' GOHOSTOS='linux' GOINSECURE='' GOMOD='/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/go.mod' GOMODCACHE='/syzkaller/jobs/linux/gopath/pkg/mod' GONOPROXY='' GONOSUMDB='' GOOS='linux' GOPATH='/syzkaller/jobs/linux/gopath' GOPRIVATE='' GOPROXY='https://proxy.golang.org,direct' GOROOT='/usr/local/go' GOSUMDB='sum.golang.org' GOTELEMETRY='local' GOTELEMETRYDIR='/syzkaller/.config/go/telemetry' GOTMPDIR='' GOTOOLCHAIN='auto' GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64' GOVCS='' GOVERSION='go1.24.4' GOWORK='' PKG_CONFIG='pkg-config' git status (err=) HEAD detached at a6c9c7312290 nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=a6c9c7312290da5bca2fc1be4872a7aeefb6e3ea -X github.com/google/syzkaller/prog.gitRevisionDate=20251104-181356" ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=a6c9c7312290da5bca2fc1be4872a7aeefb6e3ea -X github.com/google/syzkaller/prog.gitRevisionDate=20251104-181356" ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env bin/syz-sysgen touch .descriptions GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=a6c9c7312290da5bca2fc1be4872a7aeefb6e3ea -X github.com/google/syzkaller/prog.gitRevisionDate=20251104-181356" -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog mkdir -p ./bin/linux_amd64 g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \ -m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -DGOOS_linux=1 -DGOARCH_amd64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"a6c9c7312290da5bca2fc1be4872a7aeefb6e3ea\" /usr/bin/ld: /tmp/ccPsGqg4.o: in function `Connection::Connect(char const*, char const*)': executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x104): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking ./tools/check-syzos.sh 2>/dev/null