BUG: Dentry still in use in unmount
soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
------------[ cut here ]------------
BUG: Dentry ffff888113f96100{i=2,n=binder-control} still in use (1) [unmount of binder binder]
WARNING: fs/dcache.c:1638 at umount_check+0xaa/0x200 fs/dcache.c:1630, CPU#1: syz-executor/306
Modules linked in:
CPU: 1 UID: 0 PID: 306 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 4e90e420f8c3d0b7d6437ee76a57f9071b87bf8a
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:umount_check+0x197/0x200 fs/dcache.c:1630
Code: 20 00 74 08 4c 89 ef e8 a7 74 ee ff 4d 8b 4d 00 49 81 c7 c0 03 00 00 48 8b 7d c8 48 89 de 48 8b 55 d0 48 89 d9 45 89 f0 41 57 <67> 48 0f b9 3a 48 83 c4 08 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e
RSP: 0018:ffffc90000fd77c8 EFLAGS: 00010286
RAX: 1ffffffff0f86468 RBX: ffff888113f96100 RCX: ffff888113f96100
RDX: 0000000000000002 RSI: ffff888113f96100 RDI: ffffffff87edb400
RBP: ffffc90000fd7808 R08: 0000000000000001 R09: ffffffff8688e300
R10: 0000000000000000 R11: ffffffff8214e6d0 R12: dffffc0000000000
R13: ffffffff87c32340 R14: 0000000000000001 R15: ffff8881096433c0
FS: 0000000000000000(0000) GS:ffff88826e3ef000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c005e9a000 CR3: 00000001264e0000 CR4: 00000000003526b0
Call Trace:
d_walk+0x2b9/0x4f0 fs/dcache.c:1345
do_one_tree+0x2e/0x90 fs/dcache.c:1645
shrink_dcache_for_umount+0x92/0x140 fs/dcache.c:1661
generic_shutdown_super+0x6a/0x300 fs/super.c:621
kill_anon_super+0x4b/0x1d0 fs/super.c:1289
binderfs_kill_super+0x45/0x60 drivers/android/binder/rust_binderfs.c:750
deactivate_locked_super+0xd0/0x2b0 fs/super.c:474
deactivate_super+0xb8/0xe0 fs/super.c:507
cleanup_mnt+0x49e/0x530 fs/namespace.c:1318
__cleanup_mnt+0x1d/0x40 fs/namespace.c:1325
task_work_run+0x1e7/0x260 kernel/task_work.c:233
exit_task_work include/linux/task_work.h:40 [inline]
do_exit+0x7aa/0x2170 kernel/exit.c:971
do_group_exit+0x214/0x2e0 kernel/exit.c:1112
get_signal+0x12d2/0x1410 kernel/signal.c:3034
arch_do_signal_or_restart+0xbb/0x760 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:41 [inline]
exit_to_user_mode_loop+0x73/0xd0 kernel/entry/common.c:75
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline]
do_syscall_64+0x13f/0xf80 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fcac7b55ed7
Code: Unable to access opcode bytes at 0x7fcac7b55ead.
RSP: 002b:00007ffe52c0ef60 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: 0000000000000000 RBX: 000055555e9a3500 RCX: 00007fcac7b55ed7
RDX: 0000000000000030 RSI: 00007ffe52c0f040 RDI: 00000000000000f9
RBP: 00007ffe52c0efec R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
R13: 00000000000927c0 R14: 00000000000081fd R15: 00007ffe52c0f040
---[ end trace 0000000000000000 ]---
VFS: Busy inodes after unmount of binder (binder)
------------[ cut here ]------------
kernel BUG at fs/super.c:653!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 306 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT 4e90e420f8c3d0b7d6437ee76a57f9071b87bf8a
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:generic_shutdown_super+0x2f6/0x300 fs/super.c:651
Code: fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 b3 19 f5 ff 49 8b 16 48 81 c3 c0 03 00 00 48 c7 c7 60 81 3b 86 48 89 de e8 8a 45 16 ff <0f> 0b 0f 1f 84 00 00 00 00 00 b8 00 00 00 00 90 90 90 90 90 90 90
RSP: 0018:ffffc90000fd78d8 EFLAGS: 00010246
RAX: 0000000000000031 RBX: ffff8881096433c0 RCX: 937729bf649ef600
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
RBP: ffffc90000fd7900 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0e9fdcc R12: 0000000000000000
R13: dffffc0000000000 R14: ffffffff87c32340 R15: 1ffff110212c868d
FS: 0000000000000000(0000) GS:ffff88826e2ef000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd639769b80 CR3: 000000010a35a000 CR4: 00000000003526b0
Call Trace:
kill_anon_super+0x4b/0x1d0 fs/super.c:1289
binderfs_kill_super+0x45/0x60 drivers/android/binder/rust_binderfs.c:750
deactivate_locked_super+0xd0/0x2b0 fs/super.c:474
deactivate_super+0xb8/0xe0 fs/super.c:507
cleanup_mnt+0x49e/0x530 fs/namespace.c:1318
__cleanup_mnt+0x1d/0x40 fs/namespace.c:1325
task_work_run+0x1e7/0x260 kernel/task_work.c:233
exit_task_work include/linux/task_work.h:40 [inline]
do_exit+0x7aa/0x2170 kernel/exit.c:971
do_group_exit+0x214/0x2e0 kernel/exit.c:1112
get_signal+0x12d2/0x1410 kernel/signal.c:3034
arch_do_signal_or_restart+0xbb/0x760 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:41 [inline]
exit_to_user_mode_loop+0x73/0xd0 kernel/entry/common.c:75
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline]
do_syscall_64+0x13f/0xf80 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fcac7b55ed7
Code: Unable to access opcode bytes at 0x7fcac7b55ead.
RSP: 002b:00007ffe52c0ef60 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: 0000000000000000 RBX: 000055555e9a3500 RCX: 00007fcac7b55ed7
RDX: 0000000000000030 RSI: 00007ffe52c0f040 RDI: 00000000000000f9
RBP: 00007ffe52c0efec R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
R13: 00000000000927c0 R14: 00000000000081fd R15: 00007ffe52c0f040
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:generic_shutdown_super+0x2f6/0x300 fs/super.c:651
Code: fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 b3 19 f5 ff 49 8b 16 48 81 c3 c0 03 00 00 48 c7 c7 60 81 3b 86 48 89 de e8 8a 45 16 ff <0f> 0b 0f 1f 84 00 00 00 00 00 b8 00 00 00 00 90 90 90 90 90 90 90
RSP: 0018:ffffc90000fd78d8 EFLAGS: 00010246
RAX: 0000000000000031 RBX: ffff8881096433c0 RCX: 937729bf649ef600
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
RBP: ffffc90000fd7900 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff0e9fdcc R12: 0000000000000000
R13: dffffc0000000000 R14: ffffffff87c32340 R15: 1ffff110212c868d
FS: 0000000000000000(0000) GS:ffff88826e3ef000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c005e9a000 CR3: 000000010af40000 CR4: 00000000003526b0
----------------
Code disassembly (best guess):
0: 20 00 and %al,(%rax)
2: 74 08 je 0xc
4: 4c 89 ef mov %r13,%rdi
7: e8 a7 74 ee ff call 0xffee74b3
c: 4d 8b 4d 00 mov 0x0(%r13),%r9
10: 49 81 c7 c0 03 00 00 add $0x3c0,%r15
17: 48 8b 7d c8 mov -0x38(%rbp),%rdi
1b: 48 89 de mov %rbx,%rsi
1e: 48 8b 55 d0 mov -0x30(%rbp),%rdx
22: 48 89 d9 mov %rbx,%rcx
25: 45 89 f0 mov %r14d,%r8d
28: 41 57 push %r15
* 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction
2f: 48 83 c4 08 add $0x8,%rsp
33: 31 c0 xor %eax,%eax
35: 48 83 c4 10 add $0x10,%rsp
39: 5b pop %rbx
3a: 41 5c pop %r12
3c: 41 5d pop %r13
3e: 41 5e pop %r14
Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts.
2026/01/22 14:08:17 parsed 1 programs
[ 30.190759][ T36] audit: type=1400 audit(1769090897.320:61): avc: denied { node_bind } for pid=292 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 31.665447][ T36] audit: type=1400 audit(1769090898.790:62): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 31.693317][ T36] audit: type=1400 audit(1769090898.830:63): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 31.696319][ T299] cgroup: Unknown subsys name 'net'
[ 31.723311][ T36] audit: type=1400 audit(1769090898.850:64): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 31.723799][ T299] cgroup: Unknown subsys name 'devices'
[ 31.871115][ T299] cgroup: Unknown subsys name 'hugetlb'
[ 31.877557][ T299] cgroup: Unknown subsys name 'rlimit'
[ 32.041652][ T299] cpuset.memory_pressure_enabled is deprecated, use memory.pressure with CONFIG_PSI instead
[ 32.072614][ T36] audit: type=1400 audit(1769090899.200:65): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 32.096626][ T36] audit: type=1400 audit(1769090899.200:66): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 32.118048][ T36] audit: type=1400 audit(1769090899.200:67): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 32.140380][ T36] audit: type=1400 audit(1769090899.200:68): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 32.161464][ T36] audit: type=1400 audit(1769090899.200:69): avc: denied { sys_module } for pid=299 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 32.172335][ T302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 32.184217][ T36] audit: type=1400 audit(1769090899.200:70): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 32.265375][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 33.272878][ T306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 33.343490][ T306] ------------[ cut here ]------------
[ 33.350236][ T306] BUG: Dentry ffff888113f96100{i=2,n=binder-control} still in use (1) [unmount of binder binder]
[ 33.362310][ T306] WARNING: fs/dcache.c:1638 at umount_check+0xaa/0x200, CPU#1: syz-executor/306
[ 33.372424][ T306] Modules linked in:
[ 33.377806][ T306] CPU: 1 UID: 0 PID: 306 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 4e90e420f8c3d0b7d6437ee76a57f9071b87bf8a
[ 33.393507][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 33.405516][ T306] RIP: 0010:umount_check+0x197/0x200
[ 33.412427][ T306] Code: 20 00 74 08 4c 89 ef e8 a7 74 ee ff 4d 8b 4d 00 49 81 c7 c0 03 00 00 48 8b 7d c8 48 89 de 48 8b 55 d0 48 89 d9 45 89 f0 41 57 <67> 48 0f b9 3a 48 83 c4 08 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e
[ 33.436113][ T306] RSP: 0018:ffffc90000fd77c8 EFLAGS: 00010286
[ 33.444646][ T306] RAX: 1ffffffff0f86468 RBX: ffff888113f96100 RCX: ffff888113f96100
[ 33.455281][ T306] RDX: 0000000000000002 RSI: ffff888113f96100 RDI: ffffffff87edb400
[ 33.465070][ T306] RBP: ffffc90000fd7808 R08: 0000000000000001 R09: ffffffff8688e300
[ 33.475133][ T306] R10: 0000000000000000 R11: ffffffff8214e6d0 R12: dffffc0000000000
[ 33.484368][ T306] R13: ffffffff87c32340 R14: 0000000000000001 R15: ffff8881096433c0
[ 33.494519][ T306] FS: 0000000000000000(0000) GS:ffff88826e3ef000(0000) knlGS:0000000000000000
[ 33.504671][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.512637][ T306] CR2: 000000c005e9a000 CR3: 00000001264e0000 CR4: 00000000003526b0
[ 33.521335][ T306] Call Trace:
[ 33.527031][ T306]
[ 33.530219][ T306] d_walk+0x2b9/0x4f0
[ 33.536534][ T306] ? __cfi_umount_check+0x10/0x10
[ 33.545089][ T306] do_one_tree+0x2e/0x90
[ 33.549806][ T306] shrink_dcache_for_umount+0x92/0x140
[ 33.556959][ T306] generic_shutdown_super+0x6a/0x300
[ 33.562885][ T306] kill_anon_super+0x4b/0x1d0
[ 33.568059][ T306] binderfs_kill_super+0x45/0x60
[ 33.573415][ T306] deactivate_locked_super+0xd0/0x2b0
[ 33.579091][ T306] deactivate_super+0xb8/0xe0
[ 33.584362][ T306] cleanup_mnt+0x49e/0x530
[ 33.588977][ T306] __cleanup_mnt+0x1d/0x40
[ 33.593614][ T306] task_work_run+0x1e7/0x260
[ 33.598481][ T306] ? __cfi_task_work_run+0x10/0x10
[ 33.603719][ T306] ? nsproxy_free+0x2aa/0x300
[ 33.608615][ T306] ? switch_task_namespaces+0xbb/0x100
[ 33.614534][ T306] do_exit+0x7aa/0x2170
[ 33.619013][ T306] ? __cfi_do_exit+0x10/0x10
[ 33.623829][ T306] ? __cfi_anon_pipe_read+0x10/0x10
[ 33.629283][ T306] ? __cfi_autoremove_wake_function+0x10/0x10
[ 33.635757][ T306] ? __kasan_check_write+0x18/0x20
[ 33.641313][ T306] ? _raw_spin_lock_irq+0x92/0x120
[ 33.646827][ T306] ? __cfi__raw_spin_lock_irq+0x10/0x10
[ 33.652918][ T306] do_group_exit+0x214/0x2e0
[ 33.657547][ T306] ? __kasan_check_write+0x18/0x20
[ 33.663176][ T306] get_signal+0x12d2/0x1410
[ 33.667822][ T306] arch_do_signal_or_restart+0xbb/0x760
[ 33.673947][ T306] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 33.681377][ T306] ? ksys_read+0x1f9/0x260
[ 33.686731][ T306] exit_to_user_mode_loop+0x73/0xd0
[ 33.692678][ T306] do_syscall_64+0x13f/0xf80
[ 33.697756][ T306] ? clear_bhb_loop+0x50/0xa0
[ 33.703466][ T306] ? clear_bhb_loop+0x50/0xa0
[ 33.708577][ T306] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 33.715044][ T306] RIP: 0033:0x7fcac7b55ed7
[ 33.720055][ T306] Code: Unable to access opcode bytes at 0x7fcac7b55ead.
[ 33.727478][ T306] RSP: 002b:00007ffe52c0ef60 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 33.736843][ T306] RAX: 0000000000000000 RBX: 000055555e9a3500 RCX: 00007fcac7b55ed7
[ 33.745865][ T306] RDX: 0000000000000030 RSI: 00007ffe52c0f040 RDI: 00000000000000f9
[ 33.754674][ T306] RBP: 00007ffe52c0efec R08: 0000000000000000 R09: 0000000000000000
[ 33.763041][ T306] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[ 33.771703][ T306] R13: 00000000000927c0 R14: 00000000000081fd R15: 00007ffe52c0f040
[ 33.780305][ T306]
[ 33.783376][ T306] ---[ end trace 0000000000000000 ]---
[ 33.789597][ T306] VFS: Busy inodes after unmount of binder (binder)
[ 33.789716][ T306] ------------[ cut here ]------------
[ 33.802280][ T306] kernel BUG at fs/super.c:653!
[ 33.807799][ T306] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[ 33.814563][ T306] CPU: 0 UID: 0 PID: 306 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT 4e90e420f8c3d0b7d6437ee76a57f9071b87bf8a
[ 33.828852][ T306] Tainted: [W]=WARN
[ 33.833682][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 33.845963][ T306] RIP: 0010:generic_shutdown_super+0x2f6/0x300
[ 33.854247][ T306] Code: fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 b3 19 f5 ff 49 8b 16 48 81 c3 c0 03 00 00 48 c7 c7 60 81 3b 86 48 89 de e8 8a 45 16 ff <0f> 0b 0f 1f 84 00 00 00 00 00 b8 00 00 00 00 90 90 90 90 90 90 90
[ 33.876126][ T306] RSP: 0018:ffffc90000fd78d8 EFLAGS: 00010246
[ 33.884152][ T306] RAX: 0000000000000031 RBX: ffff8881096433c0 RCX: 937729bf649ef600
[ 33.893992][ T306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 33.902952][ T306] RBP: ffffc90000fd7900 R08: 0000000000000003 R09: 0000000000000004
[ 33.912168][ T306] R10: dffffc0000000000 R11: fffffbfff0e9fdcc R12: 0000000000000000
[ 33.920952][ T306] R13: dffffc0000000000 R14: ffffffff87c32340 R15: 1ffff110212c868d
[ 33.929490][ T306] FS: 0000000000000000(0000) GS:ffff88826e2ef000(0000) knlGS:0000000000000000
[ 33.939540][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.946596][ T306] CR2: 00007fd639769b80 CR3: 000000010a35a000 CR4: 00000000003526b0
[ 33.955227][ T306] Call Trace:
[ 33.958711][ T306]
[ 33.961842][ T306] kill_anon_super+0x4b/0x1d0
[ 33.966854][ T306] binderfs_kill_super+0x45/0x60
[ 33.972589][ T306] deactivate_locked_super+0xd0/0x2b0
[ 33.978189][ T306] deactivate_super+0xb8/0xe0
[ 33.983082][ T306] cleanup_mnt+0x49e/0x530
[ 33.987886][ T306] __cleanup_mnt+0x1d/0x40
[ 33.992826][ T306] task_work_run+0x1e7/0x260
[ 33.997641][ T306] ? __cfi_task_work_run+0x10/0x10
[ 34.002844][ T306] ? nsproxy_free+0x2aa/0x300
[ 34.007896][ T306] ? switch_task_namespaces+0xbb/0x100
[ 34.013668][ T306] do_exit+0x7aa/0x2170
[ 34.018157][ T306] ? __cfi_do_exit+0x10/0x10
[ 34.022874][ T306] ? __cfi_anon_pipe_read+0x10/0x10
[ 34.028194][ T306] ? __cfi_autoremove_wake_function+0x10/0x10
[ 34.034845][ T306] ? __kasan_check_write+0x18/0x20
[ 34.040336][ T306] ? _raw_spin_lock_irq+0x92/0x120
[ 34.045643][ T306] ? __cfi__raw_spin_lock_irq+0x10/0x10
[ 34.051654][ T306] do_group_exit+0x214/0x2e0
[ 34.056802][ T306] ? __kasan_check_write+0x18/0x20
[ 34.062127][ T306] get_signal+0x12d2/0x1410
[ 34.066732][ T306] arch_do_signal_or_restart+0xbb/0x760
[ 34.072471][ T306] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 34.079110][ T306] ? ksys_read+0x1f9/0x260
[ 34.083855][ T306] exit_to_user_mode_loop+0x73/0xd0
[ 34.089080][ T306] do_syscall_64+0x13f/0xf80
[ 34.093768][ T306] ? clear_bhb_loop+0x50/0xa0
[ 34.098507][ T306] ? clear_bhb_loop+0x50/0xa0
[ 34.103494][ T306] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 34.109694][ T306] RIP: 0033:0x7fcac7b55ed7
[ 34.114474][ T306] Code: Unable to access opcode bytes at 0x7fcac7b55ead.
[ 34.121862][ T306] RSP: 002b:00007ffe52c0ef60 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 34.130647][ T306] RAX: 0000000000000000 RBX: 000055555e9a3500 RCX: 00007fcac7b55ed7
[ 34.138922][ T306] RDX: 0000000000000030 RSI: 00007ffe52c0f040 RDI: 00000000000000f9
[ 34.147772][ T306] RBP: 00007ffe52c0efec R08: 0000000000000000 R09: 0000000000000000
[ 34.156136][ T306] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[ 34.164380][ T306] R13: 00000000000927c0 R14: 00000000000081fd R15: 00007ffe52c0f040
[ 34.173021][ T306]
[ 34.176178][ T306] Modules linked in:
[ 34.180794][ T306] ---[ end trace 0000000000000000 ]---
[ 34.188080][ T306] RIP: 0010:generic_shutdown_super+0x2f6/0x300
[ 34.195072][ T306] Code: fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 b3 19 f5 ff 49 8b 16 48 81 c3 c0 03 00 00 48 c7 c7 60 81 3b 86 48 89 de e8 8a 45 16 ff <0f> 0b 0f 1f 84 00 00 00 00 00 b8 00 00 00 00 90 90 90 90 90 90 90
[ 34.217191][ T306] RSP: 0018:ffffc90000fd78d8 EFLAGS: 00010246
[ 34.224733][ T306] RAX: 0000000000000031 RBX: ffff8881096433c0 RCX: 937729bf649ef600
[ 34.237718][ T306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 34.246553][ T306] RBP: ffffc90000fd7900 R08: 0000000000000003 R09: 0000000000000004
[ 34.255195][ T306] R10: dffffc0000000000 R11: fffffbfff0e9fdcc R12: 0000000000000000
[ 34.263876][ T306] R13: dffffc0000000000 R14: ffffffff87c32340 R15: 1ffff110212c868d
[ 34.272937][ T306] FS: 0000000000000000(0000) GS:ffff88826e3ef000(0000) knlGS:0000000000000000
[ 34.282328][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.295666][ T306] CR2: 000000c005e9a000 CR3: 000000010af40000 CR4: 00000000003526b0
[ 34.304104][ T306] Kernel panic - not syncing: Fatal exception
[ 34.311149][ T306] Kernel Offset: disabled
[ 34.315843][ T306] Rebooting in 86400 seconds..
syzkaller build log:
go env (err=)
AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE='auto'
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3036702656=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOMODCACHE='/syzkaller/jobs/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/syzkaller/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.24.4'
GOWORK=''
PKG_CONFIG='pkg-config'
git status (err=)
HEAD detached at 6f1aa2f9384
nothing to commit, working tree clean
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=6f1aa2f9384c3d4b4579b2da10ef9b1451804919 -X github.com/google/syzkaller/prog.gitRevisionDate=20260120-211257" ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=6f1aa2f9384c3d4b4579b2da10ef9b1451804919 -X github.com/google/syzkaller/prog.gitRevisionDate=20260120-211257" ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=6f1aa2f9384c3d4b4579b2da10ef9b1451804919 -X github.com/google/syzkaller/prog.gitRevisionDate=20260120-211257" -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
mkdir -p ./bin/linux_amd64
g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \
-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -DGOOS_linux=1 -DGOARCH_amd64=1 \
-DHOSTGOOS_linux=1 -DGIT_REVISION=\"6f1aa2f9384c3d4b4579b2da10ef9b1451804919\"
/usr/bin/ld: /tmp/cciqgOb6.o: in function `Connection::Connect(char const*, char const*)':
executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x386): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
./tools/check-syzos.sh 2>/dev/null